Mark Johnston 5d49283f88 pf: Make tag hashing more robust
tagname2tag() hashes the tag name before truncating it to 63 characters.
tag_unref() removes the tag from the name hash by computing the hash
over the truncated name.  Ensure that both operations compute the same
hash for a given tag.

The larger issue is a lack of string validation in pf(4) ioctl handlers.
This is intended to be fixed with some future work, but an extra safety
belt in tagname2hashindex() is worthwhile regardless.

Reported by:	syzbot+a0988828aafb00de7d68@syzkaller.appspotmail.com
Reviewed by:	kp
MFC after:	1 week
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D27346
2020-11-24 16:18:47 +00:00
..
2020-11-24 15:32:25 +00:00
2020-11-24 06:42:32 +00:00
2020-09-17 22:29:38 +00:00
2020-11-18 17:37:01 +00:00
2020-11-22 20:21:10 +00:00
2020-11-04 12:07:33 +00:00
2020-11-10 02:26:44 +00:00
2020-11-22 20:21:10 +00:00
2020-11-24 16:18:47 +00:00
2020-11-14 05:30:10 +00:00
2020-11-16 15:29:52 +00:00