pf: reduce the risk of src/dst mis-use
ClosedPublic
Actions

Authored by kp on Jun 23 2022, 9:19 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Dec 9 2025, 8:51 AM

	Unknown Object (File)
	Nov 27 2025, 9:05 AM

	Unknown Object (File)
	Nov 20 2025, 9:48 AM

	Unknown Object (File)
	Oct 13 2025, 10:23 AM

	Unknown Object (File)
	Oct 11 2025, 11:47 PM

	Unknown Object (File)
	Oct 11 2025, 11:47 PM

	Unknown Object (File)
	Oct 11 2025, 11:46 PM

	Unknown Object (File)
	Oct 11 2025, 2:27 PM

Subscribers

Details

Reviewers

None

Group Reviewers

network
pfsense

Commits

rG8e1c23341c0c: pf: reduce the risk of src/dst mis-use

Summary

NULL out src/dst and check them rather than relying of 'af' to indicate
these variables are valid.

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rS FreeBSD src repository - subversion

Lint

Lint Passed

Unit

No Test Coverage

Build Status

Buildable 46089
Build 42978: arc lint + arc unit

Event Timeline

kp created this revision.Jun 23 2022, 9:19 AM

Herald added subscribers: glebius, melifaro, farrokhi, imp. · View Herald TranscriptJun 23 2022, 9:19 AM

kp requested review of this revision.Jun 23 2022, 9:19 AM

Harbormaster completed remote builds in B46089: Diff 107287.Jun 23 2022, 9:19 AM

kp mentioned this in D35551: pf: copy out rather than m_pullup() in pf_test_eth_rule().Jun 23 2022, 9:20 AM

This revision was not accepted when it landed; it landed in state Needs Review.Jun 28 2022, 12:02 PM

Closed by commit rG8e1c23341c0c: pf: reduce the risk of src/dst mis-use (authored by kp). · Explain Why

This revision was automatically updated to reflect the committed changes.

kp added a commit: rG8e1c23341c0c: pf: reduce the risk of src/dst mis-use.

Revision Contents
Changeset List

Path

Size

sys/

netpfil/

pf/

pf.c

6 lines

Diff 107287

View Options

pf: reduce the risk of src/dst mis-useClosedPublicActions