cvs commit: src/sys/netgraph ng_base.c

[Alexander Motin]

mav         2008-09-13 09:17:02 UTC

  FreeBSD src repository

  Modified files:
    sys/netgraph         ng_base.c 
  Log:
  SVN rev 182995 on 2008-09-13 09:17:02Z by mav
  
  We can't implicitly trust the hook on NGQF_FN/NGQF_FN2 processing in
  ng_apply_item(). There are possible (and I have got one) use-after-free
  class panics because of it.
  
  If hook is specified, require it to be valid at the apply time. The only
  exceptions are the internal ng_con_part2(), ng_con_part3() and
  ng_rmhook_part2() functions which are specially made to work with invalid
  hooks.
  
  Revision  Changes    Path
  1.163     +14 -6     src/sys/netgraph/ng_base.c