Date: Thu, 28 Nov 2002 12:38:58 -0800 From: Luigi Rizzo <luigi@FreeBSD.org> To: "Vladimir B. Grebenschikov" <vova@sw.ru> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sbin/ipfw ipfw2.c Message-ID: <20021128123857.A70108@xorpc.icir.org> In-Reply-To: <1038477062.764.83.camel@vbook>; from vova@sw.ru on Thu, Nov 28, 2002 at 12:51:03PM %2B0300 References: <200211261958.gAQJwCal000509@repoman.freebsd.org> <1038477062.764.83.camel@vbook>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Nov 28, 2002 at 12:51:03PM +0300, Vladimir B. Grebenschikov wrote: ... > So, one can abuse kernel by invalid ipfw instruction sequence, may be > kernel should check this while add rule ? yes the kernel it should check, i will try to add the (trivial) check code soon. On the other hand this can only happen as root, and there is a simpler way to panic a system: cat /dev/zero > /dev/mem so i guess this is not more dangerous. cheers luigi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021128123857.A70108>