HomeFreeBSD

ipfw: Fix segfault in NPTv6 rule parser

Description

ipfw: Fix segfault in NPTv6 rule parser

If the user specified a prefix length with either the internal or
external prefix, we'd jump to check_prefix where we'd dereference p
which was most likely uninitialized.

Instead, store the various prefix lengths separately and check them
all after the loop.

MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D50597

Details

Provenance
p.mousavizadeh_protonmail.comAuthored on Aug 21 2025, 5:40 PM
desCommitted on Aug 25 2025, 10:37 AM
Differential Revision
D50597: ipfw: prefixlen segfault bugfix in nptv6
Parents
rGfca43874e713: LinuxKPI: 802.11: rework multicat filter updates
Branches
Unknown
Tags
Unknown