Avoid out of bounds read due to uninitialized index in ip_state.c.
This plugs a kernel memory leak and possible DoS resolving NIC names.
Reported by: Ilja Van Sprundel <ivansprundel@ioactive.com>
MFC after: 1 day
Details
Details
Diff Detail
Diff Detail
- Repository
- rG FreeBSD src repository
- Lint
Lint Skipped - Unit
Tests Skipped - Build Status
Buildable 68036 Build 64919: arc lint + arc unit
Event Timeline
| sys/netpfil/ipfilter/netinet/ip_state.c | ||
|---|---|---|
| 945 | This looks like it's supposed to check fr_names instead. | |