Date: Wed, 22 Dec 2004 00:36:04 +0000 (UTC) From: Daniel Hartmeier <dhartmei@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/contrib/pf/net pf.c Message-ID: <200412220036.iBM0a4QP091142@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
dhartmei 2004-12-22 00:36:04 UTC
FreeBSD src repository
Modified files: (Branch: RELENG_5)
sys/contrib/pf/net pf.c
Log:
MFC 1.25: Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN,
prevents a possible endless loop in pf_get_sport() with
'static-port'
ICMP state entries use the ICMP ID as port for the unique state
key. When checking for a usable key, construct the key in the
same way. Otherwise, a colliding key might be missed or a state
insertion might be refused even though it could be inserted. The
second case triggers the endless loop, possibly allowing a NATed
LAN client to lock up the kernel.
Revision Changes Path
1.18.2.6 +6 -4 src/sys/contrib/pf/net/pf.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412220036.iBM0a4QP091142>