Page MenuHomeFreeBSD

pf: Don't access sk and nk before they are allocated
ClosedPublic

Authored by vegeta_tuxpowered.net on Jun 9 2025, 9:30 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Jun 22, 1:19 PM
Unknown Object (File)
Mon, Jun 8, 8:50 AM
Unknown Object (File)
May 17 2026, 11:32 PM
Unknown Object (File)
May 17 2026, 11:31 PM
Unknown Object (File)
May 17 2026, 11:13 PM
Unknown Object (File)
Apr 30 2026, 1:05 PM
Unknown Object (File)
Apr 30 2026, 1:05 PM
Unknown Object (File)
Apr 25 2026, 5:25 PM

Details

Summary

The NAT addresses are chosen during ruleset parsing. The new af-to code stores
post-nat addresses in nsaddr. The old nat code (also used for new nat-to rules)
creates state keys and stores addresses in them.

Ensure proper way of accessing the NAT addresses in case sticky-address
is used for af-to rules.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable