freebsd-dev/sys/contrib
Daniel Hartmeier 2726bbe221 Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN,
prevents a possible endless loop in pf_get_sport() with 'static-port'

ICMP state entries use the ICMP ID as port for the unique state key. When
checking for a usable key, construct the key in the same way. Otherwise,
a colliding key might be missed or a state insertion might be refused even
though it could be inserted. The second case triggers the endless loop,
possibly allowing a NATed LAN client to lock up the kernel.

PR:			kern/74930
Reported and tested by:	Hugo Silva, Srebrenko Sehic
MFC after:		3 days
2004-12-19 19:43:04 +00:00
..
altq/altq Disable "bulk dequeue" when enabling ALTQ so it does not irritate the 2004-06-15 23:59:37 +00:00
dev clear old files now in public 2004-12-08 18:27:44 +00:00
ia64/libuwx Update to BETA 7. Besides C++ support, which is irrelevant to us, 2004-05-09 03:06:25 +00:00
ipfilter/netinet Make ip_nat compile again. Should read #if->n<-def LARGE_NAT as in ipf 4.x 2004-12-18 03:47:54 +00:00
ngatm Exclusion list for easier import. 2004-08-11 12:25:09 +00:00
pf Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN, 2004-12-19 19:43:04 +00:00