Date: Thu, 8 Dec 2005 06:00:20 GMT From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: freebsd-ipfw@FreeBSD.org Subject: Re: kern/60154: [ipfw] ipfw core (crash) Message-ID: <200512080600.jB860KXm063740@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/60154; it has been noted by GNATS. From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: bug-followup@FreeBSD.org Cc: a.nomm@wap3.net Subject: Re: kern/60154: [ipfw] ipfw core (crash) Date: Thu, 08 Dec 2005 08:58:02 +0300 This is a multi-part message in MIME format. --------------080701000609020709080702 Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 7bit The following patch can fix this error for CURRENT. -- WBR, Andrey V. Elsukov --------------080701000609020709080702 Content-Type: text/plain; name="pr-60154.diff" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="pr-60154.diff" --- ipfw2.c.orig Thu Dec 8 01:51:14 2005 +++ ipfw2.c Thu Dec 8 01:54:59 2005 @@ -2641,6 +2641,14 @@ int masklen; char md; + if (len > 30) { + /* + * O_IP_SRC_MASK and O_IP_DST_MASK can't have length + * greater than 31 + */ + errx(EX_DATAERR, "too many addresses"); + } + if (p) { md = *p; *p++ = '\0'; --------------080701000609020709080702--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200512080600.jB860KXm063740>