diff options
author | ru <ru@FreeBSD.org> | 2001-07-17 10:30:21 +0000 |
---|---|---|
committer | ru <ru@FreeBSD.org> | 2001-07-17 10:30:21 +0000 |
commit | 1a2a5935ee2d66e788d658677b29a8428581d6f5 (patch) | |
tree | 64917be7867040f75a0f3deb15fa087cf19b165e /sys/netinet/tcp_fsm.h | |
parent | cd85c941a3ba78a262003bdfeab59e83c3f5b6b0 (diff) | |
download | FreeBSD-src-1a2a5935ee2d66e788d658677b29a8428581d6f5.zip FreeBSD-src-1a2a5935ee2d66e788d658677b29a8428581d6f5.tar.gz |
Backout damage to the INADDR_TO_IFP() macro in revision 1.7.
This macro was supposed to only match local IP addresses of
interfaces, and all consumers of this macro assume this as
well. (See IP_MULTICAST_IF and IP_ADD_MEMBERSHIP socket
options in the ip(4) manpage.)
This fixes a major security breach in IPFW-based firewalls
where the `me' keyword would match the other end of a P2P
link.
PR: kern/28567
Diffstat (limited to 'sys/netinet/tcp_fsm.h')
0 files changed, 0 insertions, 0 deletions