This reduces the attack surface from user written apps that might try
to emulate the ipfilter userland.
Reported by: Ilja Van Sprundel <ivansprundel@ioactive.com>
MFC after: 1 day
Details
Details
Diff Detail
Diff Detail
- Repository
- rG FreeBSD src repository
- Lint
Lint Skipped - Unit
Tests Skipped - Build Status
Buildable 68020 Build 64903: arc lint + arc unit
Event Timeline
| sys/netpfil/ipfilter/netinet/fil.c | ||
|---|---|---|
| 3927 | fr_ifnames is an array of ints. Is this supposed to be checking fr_names instead? | |
Comment Actions
fr_names appears to be used for more than interface names. Until I fully understand this, a review is pointless.