[Bug 221201] [pf] Prevent possible endless loop when searching for an unused nat port
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Wed Aug 16 19:52:54 UTC 2017
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=221201
--- Comment #2 from commit-hook at freebsd.org ---
A commit references this bug:
Author: kp
Date: Wed Aug 16 19:52:32 UTC 2017
New revision: 322591
URL: https://svnweb.freebsd.org/changeset/base/322591
Log:
MFC r322280:
pf_get_sport(): Prevent possible endless loop when searching for an unused
nat port
This is an import of Alexander Bluhm's OpenBSD commit r1.60,
the first chunk had to be modified because on OpenBSD the
'cut' declaration is located elsewhere.
Upstream report by Jingmin Zhou:
https://marc.info/?l=openbsd-pf&m=150020133510896&w=2
OpenBSD commit message:
Use a 32 bit variable to detect integer overflow when searching for
an unused nat port. Prevents a possible endless loop if high port
is 65535 or low port is 0.
report and analysis Jingmin Zhou; OK sashan@ visa@
Quoted from: https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys/net/pf_lb.c
PR: 221201
Submitted by: Fabian Keil <fk at fabiankeil.de>
Obtained from: OpenBSD via ElectroBSD
Changes:
_U stable/11/
stable/11/sys/netpfil/pf/pf_lb.c
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-pf
mailing list