Re: [PATCH ipsec] esp4: add length check for UDP encapsulation

2019-03-27 Thread Steffen Klassert
On Mon, Mar 25, 2019 at 02:30:00PM +0100, Sabrina Dubroca wrote: > esp_output_udp_encap can produce a length that doesn't fit in the 16 > bits of a UDP header's length field. In that case, we'll send a > fragmented packet whose length is larger than IP_MAX_MTU (resulting in > "Oversized IP packet"

[PATCH ipsec] esp4: add length check for UDP encapsulation

2019-03-25 Thread Sabrina Dubroca
esp_output_udp_encap can produce a length that doesn't fit in the 16 bits of a UDP header's length field. In that case, we'll send a fragmented packet whose length is larger than IP_MAX_MTU (resulting in "Oversized IP packet" warnings on receive) and with a bogus UDP length. To prevent this, add a