Skip site navigation (1)Skip section navigation (2)
Date:      28 Nov 2002 12:51:03 +0300
From:      "Vladimir B. " Grebenschikov <vova@sw.ru>
To:        Luigi Rizzo <luigi@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sbin/ipfw ipfw2.c
Message-ID:  <1038477062.764.83.camel@vbook>
In-Reply-To: <200211261958.gAQJwCal000509@repoman.freebsd.org>
References:  <200211261958.gAQJwCal000509@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

χ Tue, 26.11.2002, Χ 22:58, Luigi Rizzo ΞΑΠΙΣΑΜ:
> luigi       2002/11/26 11:58:12 PST
> 
>   Modified files:
>     sbin/ipfw            ipfw2.c 
>   Log:
>   Fix a kernel panic with rules of the type
>   
>           prob 0.5 pipe NN ....
>   
>   due to the generation of an invalid ipfw instruction sequence.
>   No ABI change, but you need to upgrade /sbin/ipfw to generate the
>   correct code.

So, one can abuse kernel by invalid ipfw instruction sequence, may be
kernel should check this while add rule ?
  
>   Approved by: re
>   
>   Revision  Changes    Path
>   1.17      +31 -19    src/sbin/ipfw/ipfw2.c

-- 
Vladimir B. Grebenschikov <vova@sw.ru>
SWsoft Inc.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1038477062.764.83.camel>