diff options
| author | Cy Schubert <cy@FreeBSD.org> | 2026-01-08 17:41:53 +0000 |
|---|---|---|
| committer | Cy Schubert <cy@FreeBSD.org> | 2026-02-10 14:02:18 +0000 |
| commit | 47fb51847fdea3f1cce841b5f2bbbcd6f8a04ee0 (patch) | |
| tree | 86b5fa73e1b611b0d9fc0185ad0151249c0dba6d /sys/dev/netmap | |
| parent | 93075bdb813a9956e66c711eda2c83fb596711fd (diff) | |
ipfilter: Interface name must not extend beyond end of buffer
sifpidx (an interface name) cannot extend beyond the end of the
fr_names buffer.
We do the validation for fr_sifpidx here because it is a union that
contains an offset only when fr_sifpidx points to an interface name,
an offset into fr_names. The union is an offset into fr_names in this
case only.
interr_tbl now becomes a static variable outside a function to facilitate
its use by two functions within fil.c
Note that sifpidx is only used in ipf_sync() which implments ipf -y.
Reported by: Ilja Van Sprundel <ivansprundel@ioactive.com>
MFC after: 1 week
Diffstat (limited to 'sys/dev/netmap')
0 files changed, 0 insertions, 0 deletions
