Re: pfctl should check pfctl.astack is not overrun

2019-04-17 Thread Klemens Nanni
On Wed, Apr 17, 2019 at 03:06:16PM +0200, Petr Hoffmann wrote: > I noticed pfctl crashes on segfault when anchors go too deep: Yes, I've already seen this at some point but didn't get around to fixing it properly - thanks for the reminder. > It seems there is no check we fit into

pfctl should check pfctl.astack is not overrun

2019-04-17 Thread Petr Hoffmann
Hi, I noticed pfctl crashes on segfault when anchors go too deep: --8<--- $ cat ~/pf.conf | head -5 anchor foo { anchor foo { anchor foo { anchor foo { anchor foo { $ grep anchor ~/pf.conf | wc -l   66 $ /sbin/pfctl -nf ~/pf.conf Segmentation fault (core