]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
MFC r341833:
authorkp <kp@FreeBSD.org>
Tue, 25 Dec 2018 12:45:49 +0000 (12:45 +0000)
committerkp <kp@FreeBSD.org>
Tue, 25 Dec 2018 12:45:49 +0000 (12:45 +0000)
commit6d0bba988b913bee8c87112f6bc3fad1f5c1cf20
tree388f8cf942d36b42f4b1a6a1762310d02e7e220f
parent3773546698376eabdb0762d4a49c7e441b0e9f59
MFC r341833:

pf: Prevent integer overflow in PF when calculating the adaptive timeout.

Mainly states of established TCP connections would be affected resulting
in immediate state removal once the number of states is bigger than
adaptive.start.  Disabling adaptive timeouts is a workaround to avoid this bug.
Issue found and initial diff by Mathieu Blanc (mathieu.blanc at cea dot fr)

Reported by: Andreas Longwitz <longwitz AT incore.de>
Obtained from: OpenBSD
sys/netpfil/pf/pf.c