Martin Willi 84738b1aed encoding: Verify the length of KE payload data for known groups ... IKE is very strict in the length of KE payloads, and it should be safe to strictly verify their length. Not doing so is no direct threat, but allows DDoS amplification by sending short KE payloads for large groups using the target as the source address.		2015-03-18 13:33:25 +01:00
..
payloads	encoding: Verify the length of KE payload data for known groups	2015-03-18 13:33:25 +01:00
generator.c	encoding: Don't explicitly include <arpa/inet.h>	2014-06-04 15:53:03 +02:00
generator.h	Added an option to create a generator that does not log debug messages.	2012-03-20 17:31:09 +01:00
message.c	ike: Only parse payloads valid for the current IKE version	2014-12-05 15:41:47 +01:00
message.h	message: Fragment and reassemble IKEv2 messages	2014-10-10 09:32:41 +02:00
parser.c	ike: Only parse payloads valid for the current IKE version	2014-12-05 15:41:47 +01:00
parser.h	ike: Only parse payloads valid for the current IKE version	2014-12-05 15:41:47 +01:00