[WireGuard] Error building against grsec-enabled kernel

Toke Høiland-Jørgensen toke at toke.dk
Fri Oct 21 11:53:14 CEST 2016


"Jason A. Donenfeld" <Jason at zx2c4.com> writes:

> On Fri, Oct 21, 2016 at 5:02 PM, PaX Team <pageexec at gmail.com> wrote:
>> are you sure it was for satisfying PaX only and not a bug itself? :)
>
> Blurg. I was overly hasty. Note to self: do not prepare conf
> presentations and push code at the same time. Indeed this /should/ be
> ~0, which means "unset". I can't see any bugs by making it 0, but it
> would make things "semantically incorrect", I think.
>
> So the bug is actually in the ipv6 fragmentation code. I just sent a
> patch upstream and CC'd you and Emese.

Wooh! FYI I was seeing the bug being triggered on IPv4 as well...

-Toke


More information about the WireGuard mailing list