[ Charset ISO-8859-1 unsupported, converting... ] > On 03/18/2006 05:07 PM, Darren Reed wrote: > > This release of IPFilter comes after the code base has been covered > > by Coverity scans via both FreeBSD and NetBSD. This picked up a whole > > range of "bugs", some of which were quite deliberate choices at the > > time - like not free'ing up malloc'd space when returning from a > > function in a program that runs and exist. Anyhow, the good news > > is that the code has been through that already. > > Darren, > > Question more about Coverity than about IP Filter: did Coverity turn up > any genuine security issues?
No. The worst is there are some race conditions in boundary cases for SMP machines that could make it leak memory. Darren
