diff options
| author | cperciva <cperciva@FreeBSD.org> | 2006-01-11 08:02:16 +0000 |
|---|---|---|
| committer | cperciva <cperciva@FreeBSD.org> | 2006-01-11 08:02:16 +0000 |
| commit | 140c58ca2739ba49a909c87a3c29ebc86724292b (patch) | |
| tree | 7a81b7b15e028ef4d566ed7f81e8129a4aa4bf9a /sys/netinet/ip_fw2.c | |
| parent | 46b45ed528b253ce008188904a0946cd0f9a6372 (diff) | |
| download | FreeBSD-src-140c58ca2739ba49a909c87a3c29ebc86724292b.zip FreeBSD-src-140c58ca2739ba49a909c87a3c29ebc86724292b.tar.gz | |
Correct insecure temporary file usage in texindex. [06:01]
Correct insecure temporary file usage in ee. [06:02]
Correct a race condition when setting file permissions, sanitize file
names by default, and fix a buffer overflow when handling files
larger than 4GB in cpio. [06:03]
Fix an error in the handling of IP fragments in ipfw which can cause
a kernel panic. [06:04]
Security: FreeBSD-SA-06:01.texindex
Security: FreeBSD-SA-06:02.ee
Security: FreeBSD-SA-06:03.cpio
Security: FreeBSD-SA-06:04.ipfw
Diffstat (limited to 'sys/netinet/ip_fw2.c')
| -rw-r--r-- | sys/netinet/ip_fw2.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet/ip_fw2.c b/sys/netinet/ip_fw2.c index 188b88d..6237709 100644 --- a/sys/netinet/ip_fw2.c +++ b/sys/netinet/ip_fw2.c @@ -3054,7 +3054,7 @@ check_body: * if the packet is not ICMP (or is an ICMP * query), and it is not multicast/broadcast. */ - if (hlen > 0 && is_ipv4 && + if (hlen > 0 && is_ipv4 && offset == 0 && (proto != IPPROTO_ICMP || is_icmp_query(ICMP(ulp))) && !(m->m_flags & (M_BCAST|M_MCAST)) && |
