kern/60154: [ipfw] ipfw core (crash)

[Andrey V. Elsukov]

The following reply was made to PR kern/60154; it has been noted by GNATS.

From: "Andrey V. Elsukov" <bu7cher at yandex.ru>
To: bug-followup at FreeBSD.org
Cc: a.nomm at wap3.net
Subject: Re: kern/60154: [ipfw] ipfw core (crash)
Date: Thu, 08 Dec 2005 08:58:02 +0300

 This is a multi-part message in MIME format.
 --------------080701000609020709080702
 Content-Type: text/plain; charset=KOI8-R; format=flowed
 Content-Transfer-Encoding: 7bit
 
 The following patch can fix this error for CURRENT.
 
 -- 
 WBR, Andrey V. Elsukov
 
 --------------080701000609020709080702
 Content-Type: text/plain;
  name="pr-60154.diff"
 Content-Transfer-Encoding: 7bit
 Content-Disposition: inline;
  filename="pr-60154.diff"
 
 --- ipfw2.c.orig	Thu Dec  8 01:51:14 2005
 +++ ipfw2.c	Thu Dec  8 01:54:59 2005
 @@ -2641,6 +2641,14 @@
  	int masklen;
  	char md;
  
 +	if (len > 30) {
 +		/* 
 +		 * O_IP_SRC_MASK and O_IP_DST_MASK can't have length
 +		 * greater than 31 
 +		 */
 +		errx(EX_DATAERR, "too many addresses");
 +	}
 +	
  	if (p) {
  		md = *p;
  		*p++ = '\0';
 
 --------------080701000609020709080702--