K 10 svn:author V 2 ae K 8 svn:date V 27 2018-02-05T09:22:07.143010Z K 7 svn:log V 598 Modify ip6_get_prevhdr() to be able use it safely. Instead of returning pointer to the previous header, return its offset. In frag6_input() use m_copyback() and determined offset to store next header instead of accessing to it by pointer and assuming that the memory is contiguous. In rip6_input() use offset returned by ip6_get_prevhdr() instead of calculating it from pointers arithmetic, because IP header can belong to another mbuf in the chain. Reported by: Maxime Villard Reviewed by: kp MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D14158 END