Jessica Clarke 2986638550 pfctl: fix out-of-bounds access ... If pfctl is called with "pfctl -a ''" we read outside of the anchoropt buffer. Check that the buffer is sufficiently long to avoid that. Maintain the existing (and desired, because it's used as such in /etc/periodic/security/520.pfdenied) behaviour of treating "-a ''" as a request for the root anchor (or no anchor specified). PR: 264128 Reviewed by: kp		2022-05-22 10:31:42 +02:00
..
tests	pfctl tests: fix Ethernet output expectations	2022-04-21 10:26:00 +02:00
Makefile	pfctl: Move ioctl abstraction functions into libpfctl	2021-04-10 11:16:02 +02:00
Makefile.depend	DIRDEPS_BUILD: Update dependencies.	2017-10-31 00:07:04 +00:00
parse.y	pf: allow the use of tables in ethernet rules	2022-04-20 13:01:12 +02:00
pf_print_state.c	pfctl: cache getprotobynumber results	2021-07-01 21:31:45 +00:00
pf_ruleset.c	pf: add anchor support for ether rules	2022-03-02 17:00:07 +01:00
pf.os	Move pf.os to sbin/pfctl/	2018-08-11 13:58:26 +00:00
pfctl_altq.c	sys/bitset.h: reduce visibility of BIT_* macros	2021-12-05 23:00:25 +01:00
pfctl_ioctl.h	pfctl: Move ioctl abstraction functions into libpfctl	2021-04-10 11:16:02 +02:00
pfctl_optimize.c	pfctl: remove unused variable	2022-03-08 13:57:46 +01:00
pfctl_osfp.c	pfctl: Make most global variables static.	2016-08-04 19:24:44 +00:00
pfctl_parser.c	pfctl: always print 'l3' source/destination	2022-04-20 13:01:12 +02:00
pfctl_parser.h	pfctl: print ethernet rules when called with '-n'	2022-03-02 17:00:08 +01:00
pfctl_qstats.c	Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths of	2018-08-22 19:38:48 +00:00
pfctl_radix.c	libpfctl: relocate implementations of pfr_add/get/set_addrs	2022-04-04 19:14:23 +02:00
pfctl_table.c	various: general adoption of SPDX licensing ID tags.	2017-11-27 15:37:16 +00:00
pfctl.8	pfctl.8: Use the serial comma	2022-03-03 18:32:27 +01:00
pfctl.c	pfctl: fix out-of-bounds access	2022-05-22 10:31:42 +02:00
pfctl.h	pf: add anchor support for ether rules	2022-03-02 17:00:07 +01:00