d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Do not allow 'ipfw fwd' command when IPFIREWALL_FORWARD is not compiled into

Browse Source 
the kernel.  Return EINVAL instead.
This commit is contained in:
Andre Oppermann 2004-09-13 19:27:23 +00:00
parent f91248c1ad
commit bda337d05e
1 changed files with 4 additions and 0 deletions

4
sys/netinet/ip_fw2.c

@ -2955,9 +2955,13 @@ check_ipfw_struct(struct ip_fw *rule, int size)
goto check_action;
case O_FORWARD_IP:
#ifdef IPFIREWALL_FORWARD
if (cmdlen != F_INSN_SIZE(ipfw_insn_sa))
goto bad_size;
goto check_action;
#else
return EINVAL;
#endif
case O_DIVERT:
case O_TEE: