From owner-cvs-all Thu Nov 28 13: 1:59 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EE80437B401; Thu, 28 Nov 2002 13:01:57 -0800 (PST) Received: from vbook.express.ru (vbook.nc.express.ru [212.24.37.35]) by mx1.FreeBSD.org (Postfix) with ESMTP id E3FED43E9C; Thu, 28 Nov 2002 13:01:56 -0800 (PST) (envelope-from vova@sw.ru) Received: from vova by vbook.express.ru with local (Exim 4.10) id 18HVn4-0000JH-00; Fri, 29 Nov 2002 00:01:42 +0300 Subject: Re: cvs commit: src/sbin/ipfw ipfw2.c From: "Vladimir B. " Grebenschikov To: Luigi Rizzo Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org In-Reply-To: <20021128123857.A70108@xorpc.icir.org> References: <200211261958.gAQJwCal000509@repoman.freebsd.org> <1038477062.764.83.camel@vbook> <20021128123857.A70108@xorpc.icir.org> Content-Type: text/plain; charset=KOI8-R Content-Transfer-Encoding: quoted-printable Organization: SWsoft Inc. Message-Id: <1038517300.749.10.camel@vbook> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.1.2 (Preview Release) Date: 29 Nov 2002 00:01:42 +0300 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG =F7 Thu, 28.11.2002, =D7 23:38, Luigi Rizzo =CE=C1=D0=C9=D3=C1=CC: > On Thu, Nov 28, 2002 at 12:51:03PM +0300, Vladimir B. Grebenschikov wrot= e: > ... > > So, one can abuse kernel by invalid ipfw instruction sequence, may be > > kernel should check this while add rule ? >=20 > yes the kernel it should check, i will try to add the (trivial) > check code soon. > On the other hand this can only happen as root, and there is > a simpler way to panic a system: >=20 > cat /dev/zero > /dev/mem >=20 > so i guess this is not more dangerous. Of course root have a lot of ways to panic system. But I think it is better to detect miss-configuration instead of panic if it is possible. > cheers > luigi --=20 Vladimir B. Grebenschikov SWsoft Inc. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message