NetBSD/sys/dist/pf/net
drochner 9b0c6e6540 make sure the "overload_tbl" member of "struct pf_rule" copied in
from userland is initialized (it is used by the kernel only)
fixes crash or data injection (CVE-2010-3830), usually by root user only
OpenBSD has rewritten the code to start with a zero'd struct and fills
in needed parts only - to be considered in case a newer pf version
is imported.
2011-01-19 19:58:02 +00:00
..
if_compat.c
if_compat.h
if_pflog.c
if_pflog.h
if_pfsync.c ip_randomid: make mechanism MP-safe and more modular. 2010-11-05 01:35:57 +00:00
if_pfsync.h
pf.c Add support for pfs(8) 2010-05-07 17:41:57 +00:00
pf_if.c
pf_ioctl.c make sure the "overload_tbl" member of "struct pf_rule" copied in 2011-01-19 19:58:02 +00:00
pf_mtag.c
pf_mtag.h
pf_norm.c ip_randomid: make mechanism MP-safe and more modular. 2010-11-05 01:35:57 +00:00
pf_osfp.c
pf_ruleset.c
pf_table.c
pfvar.h Add support for pfs(8) 2010-05-07 17:41:57 +00:00