Skip site navigation (1)Skip section navigation (2)
Date:      28 Nov 2002 12:51:03 +0300
From:      "Vladimir B. " Grebenschikov <vova@sw.ru>
To:        Luigi Rizzo <luigi@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sbin/ipfw ipfw2.c
Message-ID:  <1038477062.764.83.camel@vbook>
In-Reply-To: <200211261958.gAQJwCal000509@repoman.freebsd.org>
References:  <200211261958.gAQJwCal000509@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
=F7 Tue, 26.11.2002, =D7 22:58, Luigi Rizzo =CE=C1=D0=C9=D3=C1=CC:
> luigi       2002/11/26 11:58:12 PST
>=20
>   Modified files:
>     sbin/ipfw            ipfw2.c=20
>   Log:
>   Fix a kernel panic with rules of the type
>  =20
>           prob 0.5 pipe NN ....
>  =20
>   due to the generation of an invalid ipfw instruction sequence.
>   No ABI change, but you need to upgrade /sbin/ipfw to generate the
>   correct code.

So, one can abuse kernel by invalid ipfw instruction sequence, may be
kernel should check this while add rule ?
 =20
>   Approved by: re
>  =20
>   Revision  Changes    Path
>   1.17      +31 -19    src/sbin/ipfw/ipfw2.c

--=20
Vladimir B. Grebenschikov <vova@sw.ru>
SWsoft Inc.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1038477062.764.83.camel>