HomeFreeBSD

pf: Prevent integer overflow in PF when calculating the adaptive timeout.

Description

pf: Prevent integer overflow in PF when calculating the adaptive timeout.

Mainly states of established TCP connections would be affected resulting
in immediate state removal once the number of states is bigger than
adaptive.start. Disabling adaptive timeouts is a workaround to avoid this bug.
Issue found and initial diff by Mathieu Blanc (mathieu.blanc at cea dot fr)

Reported by: Andreas Longwitz <longwitz AT incore.de>
Obtained from: OpenBSD
MFC after: 2 weeks

Details

Provenance
kpAuthored on
Parents
rS341832: Remove a dead file. CVS was removed in r251794.
Branches
Unknown
Tags
Unknown