From: Peter Philipp Subject: /sys/net/if_mpe.c To: tech@openbsd.org Date: Tue, 13 Aug 2024 16:53:52 +0200 Hi, Looking through the if_mpe.c code here. Something struck me odd... "where is the length checks to make sure a packet is complete?" 259 switch (dst->sa_family) { 260 case AF_INET: { 261 struct ip *ip = mtod(m, struct ip *); 262 tos = ip->ip_tos; If you can spend a minute time to look into this and confirm that it's missing then I've done my service. Thank you, -pjp -- ** out of spiffy .signature messages