summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat (limited to 'net-firewall/ipsec-tools/files')
-rw-r--r--net-firewall/ipsec-tools/files/digest-ipsec-tools-0.4-r21
-rw-r--r--net-firewall/ipsec-tools/files/ipsec-tools-0.4-dos-fix.diff29
2 files changed, 30 insertions, 0 deletions
diff --git a/net-firewall/ipsec-tools/files/digest-ipsec-tools-0.4-r2 b/net-firewall/ipsec-tools/files/digest-ipsec-tools-0.4-r2
new file mode 100644
index 000000000000..0855393d1461
--- /dev/null
+++ b/net-firewall/ipsec-tools/files/digest-ipsec-tools-0.4-r2
@@ -0,0 +1 @@
+MD5 dceea3b72328a580cf156d74cbee6f80 ipsec-tools-0.4.tar.gz 915420
diff --git a/net-firewall/ipsec-tools/files/ipsec-tools-0.4-dos-fix.diff b/net-firewall/ipsec-tools/files/ipsec-tools-0.4-dos-fix.diff
new file mode 100644
index 000000000000..a7b44c268897
--- /dev/null
+++ b/net-firewall/ipsec-tools/files/ipsec-tools-0.4-dos-fix.diff
@@ -0,0 +1,29 @@
+diff -aur ipsec-tools-0.4-orig/src/racoon/isakmp_agg.c ipsec-tools-0.4/src/racoon/isakmp_agg.c
+--- ipsec-tools-0.4-orig/src/racoon/isakmp_agg.c 2004-03-23 04:50:27.000000000 -0800
++++ ipsec-tools-0.4/src/racoon/isakmp_agg.c 2005-12-03 11:25:10.000000000 -0800
+@@ -400,7 +400,11 @@
+ }
+
+ /* payload existency check */
+- /* XXX to be checked each authentication method. */
++ if (iph1->dhpub_p == NULL || iph1->nonce_p == NULL) {
++ plog(LLV_ERROR, LOCATION, iph1->remote,
++ "few isakmp message received.\n");
++ goto end;
++ }
+
+ /* verify identifier */
+ if (ipsecdoi_checkid1(iph1) != 0) {
+@@ -755,7 +759,11 @@
+ }
+
+ /* payload existency check */
+- /* XXX to be checked each authentication method. */
++ if (iph1->dhpub_p == NULL || iph1->nonce_p == NULL) {
++ plog(LLV_ERROR, LOCATION, iph1->remote,
++ "few isakmp message received.\n");
++ goto end;
++ }
+
+ /* verify identifier */
+ if (ipsecdoi_checkid1(iph1) != 0) {