aboutsummaryrefslogtreecommitdiff
path: root/sbin/fsirand/fsirand.c
diff options
context:
space:
mode:
authorKristof Provost <kp@FreeBSD.org>2018-12-11 21:44:39 +0000
committerKristof Provost <kp@FreeBSD.org>2018-12-11 21:44:39 +0000
commit5b551954ab0c94bd17a4405183a5a3dfd4370751 (patch)
treeed5c16dd66d8f5a23a1996645cc0687a3f5c3439 /sbin/fsirand/fsirand.c
parent7984cba7d7824b6f2b22be135e06a32ed1e27140 (diff)
downloadsrc-5b551954ab0c94bd17a4405183a5a3dfd4370751.tar.gz
src-5b551954ab0c94bd17a4405183a5a3dfd4370751.zip
pf: Prevent integer overflow in PF when calculating the adaptive timeout.
Mainly states of established TCP connections would be affected resulting in immediate state removal once the number of states is bigger than adaptive.start. Disabling adaptive timeouts is a workaround to avoid this bug. Issue found and initial diff by Mathieu Blanc (mathieu.blanc at cea dot fr) Reported by: Andreas Longwitz <longwitz AT incore.de> Obtained from: OpenBSD MFC after: 2 weeks
Notes
Notes: svn path=/head/; revision=341833
Diffstat (limited to 'sbin/fsirand/fsirand.c')
0 files changed, 0 insertions, 0 deletions