ipfw table add problem

Ben Morrow ben at morrow.me.uk
Tue Nov 26 12:48:13 UTC 2013


Quoth Michael Butler <imb at protected-networks.net>:
> 
> Misinterpreting "10.2.3.01" as "0.0.0.10/32" without so much as a
> warning from either inet_pton() or ipfw is an egregious breach of POLA,

That's not a bug in inet_pton, though, that's a bug in ipfw. It's
blindly passing the string to atoi or some such when inet_pton fails,
and ignoring the fact it doesn't consume the whole string.

Ben



More information about the freebsd-stable mailing list