Page MenuHomeFreeBSD
Differential D55260

ipfilter: Avoid negative array indicies
ClosedPublic
Actions

Authored by cy on Feb 12 2026, 4:14 AM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Oct 6, 6:44 PM
Unknown Object (File)
Mon, Oct 5, 10:14 AM
Unknown Object (File)
Sun, Oct 4, 5:50 PM
Unknown Object (File)
Thu, Sep 24, 6:34 PM
Unknown Object (File)
Sep 6 2026, 2:17 PM
Unknown Object (File)
Aug 28 2026, 1:59 PM
Unknown Object (File)
Aug 28 2026, 1:58 PM
Unknown Object (File)
Aug 21 2026, 4:05 AM
View All 66 Files
Subscribers
imp
melifaro
vegeta_tuxpowered.net

Details

Reviewers
emaste
markj
glebius
Commits
rGb1f63c6ab7df: ipfilter: Avoid negative array indicies
rGe2315ce0b6df: ipfilter: Avoid negative array indicies
rG3fdbd8a07a2d: ipfilter: Avoid negative array indicies
Summary

Array indices must always be posive. We avoid this by making each index
unsigned. This mitigates out-of-bounds reads and writes.

Reported by: Ilja Van Sprundel <ivansprundel@ioactive.com>

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
sys/
netpfil/
ipfilter/
netinet/
4 lines
2 lines
2 lines

Diff 172040

View Options

sys/netpfil/ipfilter/netinet/fil.c

Loading...
View Options

sys/netpfil/ipfilter/netinet/ip_fil.h

Loading...
View Options

sys/netpfil/ipfilter/netinet/ip_state.c

Loading...