Attach mbuf to the end-of-packet descriptor when sending packets and
swap the DMA mapping accordingly. This prevents a potential use-after-free
by the DMA engine of the network interface discovered by Acts1631.
Fix based on a suggested diff by Acts1631.
ok mvs@
In check_delta() ensure delta list ends with the notification serial
If the delta sequence does not end with the notification serial there
is a hole at the end. The check for this condition was lost in rev1.18.
An RRDP notification with any hole in its delta sequence is invalid and
so error out and fall back to rsync. It is valid to have no deltas at
all so check for that case as well.
Reported by Fedor Vompe via job@
OK tb@
rpki-client: ensure delta list ends with the notification serial
In rrdp_notification.c r1.18 a check ensuring that the delta list ends
with the notification serial was lost. This means a later assert could
trigger. Reinstate a version of this check next to the check that the
delta list starts at the proper spot.
A follow up commit by claudio hardens this some more.
From Fedor Vompe via job
ok claudio
libssl: bump sigalg maximum to 256
With PQ algorithms getting more widely deployed, the formerly generous cap
of 32 sigalgs has long been known to be too tight for a while. A couple of
years back jmatthew ran into interop issues with the oqs provider being
enabled on OmniOS by default. OpenSSL 4.1 now announcing 39 sigalgs, this
is becoming a real-world problem and is first and foremost protecting us
from seamless interop with other stacks.
To this end, introduce a helper shared between client and server to cap
the list size and a macro similar to the one we have for supported groups.
Thanks to DabeDotCom for reporting.
Fixes https://github.com/libressl/portable/issues/1446
ok jsing
