Date: Wed, 18 Jan 2006 14:24:39 +0000 (UTC) From: Andre Oppermann <andre@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/net if_arcsubr.c if_ef.c if_ethersubr.c if_fddisubr.c if_fwsubr.c if_iso88025subr.c if_ppp.c src/sys/netinet in_var.h ip_fastfwd.c Message-ID: <200601181424.k0IEOddG064208@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
andre 2006-01-18 14:24:39 UTC
FreeBSD src repository
Modified files:
sys/net if_arcsubr.c if_ef.c if_ethersubr.c
if_fddisubr.c if_fwsubr.c
if_iso88025subr.c if_ppp.c
sys/netinet in_var.h ip_fastfwd.c
Log:
Return mbuf pointer or NULL from ip_fastforward() as the mbuf pointer
may have changed by m_pullup() during fastforward processing.
While this is a bug it is actually never triggered in real world
situations and it is not remotely exploitable.
Found by: Coverity Prevent(tm)
Coverity ID: CID780
Sponsored by: TCP/IP Optimization Fundraise 2005
Revision Changes Path
1.29 +2 -2 src/sys/net/if_arcsubr.c
1.39 +1 -1 src/sys/net/if_ef.c
1.212 +1 -1 src/sys/net/if_ethersubr.c
1.103 +1 -1 src/sys/net/if_fddisubr.c
1.20 +1 -1 src/sys/net/if_fwsubr.c
1.74 +1 -1 src/sys/net/if_iso88025subr.c
1.112 +1 -1 src/sys/net/if_ppp.c
1.56 +1 -1 src/sys/netinet/in_var.h
1.34 +18 -18 src/sys/netinet/ip_fastfwd.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200601181424.k0IEOddG064208>