From owner-freebsd-security  Mon Jul 31 14:11:51 2000
Delivered-To: freebsd-security@freebsd.org
Received: from cairo.anu.edu.au (cairo.anu.edu.au [150.203.224.11])
	by hub.freebsd.org (Postfix) with ESMTP id C309837BCDC
	for <freebsd-security@FreeBSD.ORG>; Mon, 31 Jul 2000 14:11:43 -0700 (PDT)
	(envelope-from avalon@cairo.anu.edu.au)
Received: (from avalon@localhost)
	by cairo.anu.edu.au (8.9.3/8.9.3) id HAA29084;
	Tue, 1 Aug 2000 07:11:36 +1000 (EST)
From: Darren Reed <avalon@coombs.anu.edu.au>
Message-Id: <200007312111.HAA29084@cairo.anu.edu.au>
Subject: Bridge filtering can cause crash
To: trish@bsdunix.net (Siobhan Patricia Lynch)
Date: Tue, 1 Aug 2000 07:11:36 +1000 (EST)
Cc: freebsd-security@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL39 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


Just in case anyone is wondering, if you look at the bridge_filter()
routine in /sys/net/if_bridg.c for OpenBSD, you will see that it does
a number of sanity checks on the packet - none of which FreeBSD does -
before passing it to the filtering routine(s).

Darren


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message