cvs commit: src/sys/contrib/pf/net pf.c

Daniel Hartmeier dhartmei at
Tue Dec 21 16:36:05 PST 2004

dhartmei    2004-12-22 00:36:04 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_5)
    sys/contrib/pf/net   pf.c 
  MFC 1.25: Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN,
            prevents a possible endless loop in pf_get_sport() with
            ICMP state entries use the ICMP ID as port for the unique state
            key. When checking for a usable key, construct the key in the
            same way. Otherwise, a colliding key might be missed or a state
            insertion might be refused even though it could be inserted. The
            second case triggers the endless loop, possibly allowing a NATed
            LAN client to lock up the kernel.
  Revision  Changes    Path  +6 -4      src/sys/contrib/pf/net/pf.c

More information about the cvs-all mailing list