diff options
| author | dhartmei <dhartmei@FreeBSD.org> | 2004-12-19 19:43:04 +0000 |
|---|---|---|
| committer | dhartmei <dhartmei@FreeBSD.org> | 2004-12-19 19:43:04 +0000 |
| commit | b61c49cccce7d7a752e9f985c0dfc3b59655cbff (patch) | |
| tree | 44066251e372ad74efc618bfe41d462b1c1ce39b /usr.bin/at | |
| parent | ae7f7772e559abc8a205346bbdb0fe8ad1ba1d2c (diff) | |
| download | FreeBSD-src-b61c49cccce7d7a752e9f985c0dfc3b59655cbff.zip FreeBSD-src-b61c49cccce7d7a752e9f985c0dfc3b59655cbff.tar.gz | |
Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN,
prevents a possible endless loop in pf_get_sport() with 'static-port'
ICMP state entries use the ICMP ID as port for the unique state key. When
checking for a usable key, construct the key in the same way. Otherwise,
a colliding key might be missed or a state insertion might be refused even
though it could be inserted. The second case triggers the endless loop,
possibly allowing a NATed LAN client to lock up the kernel.
PR: kern/74930
Reported and tested by: Hugo Silva, Srebrenko Sehic
MFC after: 3 days
Diffstat (limited to 'usr.bin/at')
0 files changed, 0 insertions, 0 deletions
