Re: kern/165373: [ipfw] Obvious use-after-free in ipfw_nat()

2012-02-21 Thread linimon
Old Synopsis: Obvious use-after-free in ipfw_nat()
New Synopsis: [ipfw] Obvious use-after-free in ipfw_nat()

Responsible-Changed-From-To: freebsd-bugs->freebsd-ipfw
Responsible-Changed-By: linimon
Responsible-Changed-When: Wed Feb 22 03:43:51 UTC 2012
Responsible-Changed-Why: 
Over to maintainer(s).

http://www.freebsd.org/cgi/query-pr.cgi?pr=165373
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: kern/165373: [ipfw] Obvious use-after-free in ipfw_nat()

2012-02-21 Thread ae
Synopsis: [ipfw] Obvious use-after-free in ipfw_nat()

State-Changed-From-To: open->patched
State-Changed-By: ae
State-Changed-When: Wed Feb 22 04:19:55 UTC 2012
State-Changed-Why: 
Patched in head/. Thanks!

http://www.freebsd.org/cgi/query-pr.cgi?pr=165373
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"


Re: kern/165373: commit references a PR

2012-02-21 Thread dfilter service
The following reply was made to PR kern/165373; it has been noted by GNATS.

From: dfil...@freebsd.org (dfilter service)
To: bug-follo...@freebsd.org
Cc:  
Subject: Re: kern/165373: commit references a PR
Date: Wed, 22 Feb 2012 04:19:46 + (UTC)

 Author: ae
 Date: Wed Feb 22 04:19:33 2012
 New Revision: 231991
 URL: http://svn.freebsd.org/changeset/base/231991
 
 Log:
   Don't use `m' after m_megapullup.
   
   PR:  kern/165373
   MFC after:   3 days
 
 Modified:
   head/sys/netinet/ipfw/ip_fw_nat.c
 
 Modified: head/sys/netinet/ipfw/ip_fw_nat.c
 ==
 --- head/sys/netinet/ipfw/ip_fw_nat.c  Wed Feb 22 03:36:15 2012
(r231990)
 +++ head/sys/netinet/ipfw/ip_fw_nat.c  Wed Feb 22 04:19:33 2012
(r231991)
 @@ -315,7 +315,7 @@ ipfw_nat(struct ip_fw_args *args, struct
}
  
if (retval == PKT_ALIAS_RESPOND)
 -  m->m_flags |= M_SKIP_FIREWALL;
 +  mcl->m_flags |= M_SKIP_FIREWALL;
mcl->m_pkthdr.len = mcl->m_len = ntohs(ip->ip_len);
  
/*
 ___
 svn-src-...@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
 
___
freebsd-ipfw@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"