diff options
| author | Kyle Evans <kevans@FreeBSD.org> | 2025-11-01 17:34:11 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2025-12-16 13:57:34 +0000 |
| commit | c0cb68169bebc4210f9eccf643aeb73bf6d34654 (patch) | |
| tree | fd71b2d9fdf4efeb914f16bce8266a39033cb561 /libexec | |
| parent | 476b20984a6fed7e966f7b790444e23700603b6b (diff) | |
ipfw: pmod: avoid further rule processing after tcp-mod failures
m_pullup() here will have freed the mbuf chain, but we pass back an
IP_FW_DENY without any signal that the outer loop should finish. Thus,
rule processing continues without an mbuf and there's a chance that we
conclude that the packet may pass (but there's no mbuf remaining)
depending on the rules that follow it.
PR: 284606
Reviewed by: ae
Approved by: so
Security: FreeBSD-SA-25:11.ipfw
Security: CVE-2025-14769
(cherry picked from commit c0382512bfce872102d213b9bc2550de0bc30b67)
(cherry picked from commit deb684f9d1d6a3681e451d3af31f768c567f7dbe)
Diffstat (limited to 'libexec')
0 files changed, 0 insertions, 0 deletions