hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2025-01-22 16:44:32 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Do not allow 'ipfw fwd' command when IPFIREWALL_FORWARD is not compiled into

Browse Source 
the kernel.  Return EINVAL instead.
This commit is contained in:
Andre Oppermann 2004-09-13 19:27:23 +00:00
parent f91248c1ad
commit bda337d05e
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=135168
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/netinet/ip_fw2.c
View File

@ -2955,9 +2955,13 @@ check_ipfw_struct(struct ip_fw *rule, int size)
goto check_action;
case O_FORWARD_IP:
#ifdef IPFIREWALL_FORWARD
if (cmdlen != F_INSN_SIZE(ipfw_insn_sa))
goto bad_size;
goto check_action;
#else
return EINVAL;
#endif
case O_DIVERT:
case O_TEE: