freebsd-dev/sys/netpfil
Marcel Moolenaar d6d35f1561 Fix use-after-free bugs in pfsync(4)
Use after free happens for state that is deleted. The reference
count is what prevents the state from being freed. When the
state is dequeued, the reference count is dropped and the memory
freed. We can't dereference the next pointer or re-queue the
state.

MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D8671
2016-12-02 06:15:59 +00:00
..
ipfw Fix ICMPv6 Time Exceeded error message translation. 2016-11-26 10:04:05 +00:00
pf Fix use-after-free bugs in pfsync(4) 2016-12-02 06:15:59 +00:00