diff options
| author | John Baldwin <jhb@FreeBSD.org> | 2026-07-27 15:36:55 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2026-07-28 17:34:59 +0000 |
| commit | d7ad56decf8f6302be6ecda9652a039c8e3c8e11 (patch) | |
| tree | b1cb902db2c8dfdcf331e6465b799e1f48759550 /lib/libnetmap/libnetmap.h | |
| parent | 2864c9b3b51140a62b2860d826fb91d405738956 (diff) | |
wg(4): Check for crypto operation errors
In particular, handle authentication errors due to bad MACs when
decrypting packets.
Since the current dispatch code assumes synchronous OCF sessions by
design, explicitly reject any created OCF session that is not
synchronous. Software sessions are always synchronous in practice, so
this should be a nop.
Approved by: so
Security: FreeBSD-SA-26:52.if_wg
Security: CVE-2026-58085
Reviewed by: markj
Sponsored by: Chelsio Communications
Diffstat (limited to 'lib/libnetmap/libnetmap.h')
0 files changed, 0 insertions, 0 deletions