The following reply was made to PR kern/60154; it has been noted by GNATS. From: "Andrey V. Elsukov" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: kern/60154: [ipfw] ipfw core (crash) Date: Thu, 08 Dec 2005 08:58:02 +0300
This is a multi-part message in MIME format. --------------080701000609020709080702 Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 7bit The following patch can fix this error for CURRENT. -- WBR, Andrey V. Elsukov --------------080701000609020709080702 Content-Type: text/plain; name="pr-60154.diff" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="pr-60154.diff" --- ipfw2.c.orig Thu Dec 8 01:51:14 2005 +++ ipfw2.c Thu Dec 8 01:54:59 2005 @@ -2641,6 +2641,14 @@ int masklen; char md; + if (len > 30) { + /* + * O_IP_SRC_MASK and O_IP_DST_MASK can't have length + * greater than 31 + */ + errx(EX_DATAERR, "too many addresses"); + } + if (p) { md = *p; *p++ = '\0'; --------------080701000609020709080702-- _______________________________________________ freebsd-ipfw@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw To unsubscribe, send any mail to "[EMAIL PROTECTED]"