freebsd-nq/sys/netpfil/pf
Marcel Moolenaar d6d35f1561 Fix use-after-free bugs in pfsync(4)
Use after free happens for state that is deleted. The reference
count is what prevents the state from being freed. When the
state is dequeued, the reference count is dropped and the memory
freed. We can't dereference the next pointer or re-queue the
state.

MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D8671
2016-12-02 06:15:59 +00:00
..
if_pflog.c Make sure pflog is attached after pf is initializaed so we can 2016-06-23 22:31:10 +00:00
if_pfsync.c Fix use-after-free bugs in pfsync(4) 2016-12-02 06:15:59 +00:00
in4_cksum.c
pf_altq.h Add ALTQ(9) support for the CoDel algorithm. 2015-08-21 22:02:22 +00:00
pf_if.c Remove ifa_list, use ifa_link (structure field) instead. 2016-09-28 13:29:11 +00:00
pf_ioctl.c pf: remove fastroute tag 2016-10-04 19:35:14 +00:00
pf_lb.c Do not lookup source node twice when pf_map_addr() is used. 2014-08-15 14:16:08 +00:00
pf_mtag.h ALTQ FAIRQ discipline import from DragonFLY 2015-06-24 19:16:41 +00:00
pf_norm.c pf: port extended DSCP support from OpenBSD 2016-10-13 20:34:44 +00:00
pf_osfp.c
pf_ruleset.c
pf_table.c MFP r287070,r287073: split radix implementation and route table structure. 2016-01-25 06:33:15 +00:00
pf.c pf: port extended DSCP support from OpenBSD 2016-10-13 20:34:44 +00:00
pf.h In the forwarding case refragment the reassembled packets with the same 2015-02-16 07:01:02 +00:00