Hello,

</snip>
> I suggest to do two things: add a check in pfr_validate_addr
> that is called after every copyin and also perform the check
> in pfr_create_kentry before we attempt to use the value.
> 
> OK?

    change looks good to me.
> 
> P.S.
> What does 'k' table and entry prefix stand for in pf_table.c?
> Kernel?

    I think so, at least that's my understanding too.

regards
sasha

Reply via email to