diff options
| author | Maxim Konovalov <maxim@FreeBSD.org> | 2026-09-15 17:55:40 +0000 |
|---|---|---|
| committer | Maxim Konovalov <maxim@FreeBSD.org> | 2026-09-29 01:47:44 +0000 |
| commit | da0067ded585fbf242fb15a7dbeb155130f1be6d (patch) | |
| tree | 31ad1180a53930481f38190b0e919814ff161f45 | |
| parent | c52f99acee2a65b8e58b9cc50a00130eb238f909 (diff) | |
ipfw: guard against NULL deref with clat/plat prefixes without length
Found with: Claude Code Sonnet 5
MFC after: 2 weeks
(cherry picked from commit 47b02ace19c53e72ad2290d974025292ff97464a)
| -rw-r--r-- | sbin/ipfw/nat64clat.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sbin/ipfw/nat64clat.c b/sbin/ipfw/nat64clat.c index 63fa7dae14e2..3fc7032683a6 100644 --- a/sbin/ipfw/nat64clat.c +++ b/sbin/ipfw/nat64clat.c @@ -208,6 +208,9 @@ nat64clat_create(const char *name, uint8_t set, int ac, char *av[]) if ((p = strchr(*av, '/')) != NULL) *p++ = '\0'; + else + errx(EX_USAGE, + "Prefix length required: %s", *av); if (inet_pton(AF_INET6, *av, &prefix) != 1) errx(EX_USAGE, "Bad prefix: %s", *av); |