K 10 svn:author V 6 gordon K 8 svn:date V 27 2018-03-07T05:47:48.730441Z K 7 svn:log V 301 Port r329561 to stable/10. There were structural changes preventing MFC. Check packet length to not make an out of bounds access. Also, save ah_nxt value to use later, since the ah pointer can become invalid. Reviewed by: ae@ Approved by: so Security: CVE-2018-6916 Security: FreeBSD-SA-18:01.ipsec END