[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391

--- Comment #4 from commit-h...@freebsd.org ---
A commit references this bug:

Author: ae
Date: Sun Mar  5 22:19:43 UTC 2017
New revision: 314715
URL: https://svnweb.freebsd.org/changeset/base/314715

Log:
  Reject invalid object types that can not be used with specific opcodes.

  When we doing reference counting of named objects in the new rule,
  for existing objects check that opcode references to correct object,
  otherwise return EINVAL.

  PR:   217391
  MFC after:1 week
  Sponsored by: Yandex LLC

Changes:
  head/sys/netpfil/ipfw/ip_fw_sockopt.c

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"

[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391

--- Comment #3 from Eugene Grosbein  ---
Thanks, this patch really helps. Now second command (with error) gets rejected
by the kernel:

# ipfw add 1 count ip from any to any in recv 'table(10)'
ipfw: getsockopt(IP_FW_XADD): Invalid argument

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"

[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391

Andrey V. Elsukov  changed:

   What|Removed |Added

 CC||a...@freebsd.org

--- Comment #2 from Andrey V. Elsukov  ---
Created attachment 180481
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=180481=edit
Proposed patch

I think this patch should fix the problem. Can you test it?

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"

[Bug 217391] [ipfw] [panic] erroneous ipfw rule triggers KASSERT

[bugzilla-noreply]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217391

Mark Linimon  changed:

   What|Removed |Added

   Assignee|freebsd-b...@freebsd.org|freebsd-ipfw@FreeBSD.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-ipfw@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "freebsd-ipfw-unsubscr...@freebsd.org"