mirror of
https://github.com/freebsd/freebsd-src
synced 2024-11-05 18:22:52 +00:00
Remove a possible loophole - previously the code wouldn't pass packets destined
to the loopback address to the packet filter. Reviewed by: "Ugen J.S.Antsilevich" <ugen@netvision.net.il>
This commit is contained in:
parent
6c1bb9003f
commit
6db216a6d7
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=6237
1 changed files with 4 additions and 5 deletions
|
@ -31,7 +31,7 @@
|
|||
* SUCH DAMAGE.
|
||||
*
|
||||
* @(#)ip_input.c 8.2 (Berkeley) 1/4/94
|
||||
* $Id: ip_input.c,v 1.14 1994/12/14 19:06:37 wollman Exp $
|
||||
* $Id: ip_input.c,v 1.15 1995/01/12 13:06:30 ugen Exp $
|
||||
*/
|
||||
|
||||
#include <sys/param.h>
|
||||
|
@ -243,10 +243,9 @@ ipintr()
|
|||
*/
|
||||
|
||||
if (ip_fw_chk_ptr!=NULL)
|
||||
if (((char *)&(ip->ip_dst.s_addr))[0] != 127
|
||||
&& !(*ip_fw_chk_ptr)(ip,m->m_pkthdr.rcvif,ip_fw_chain) ) {
|
||||
goto bad;
|
||||
}
|
||||
if (!(*ip_fw_chk_ptr)(ip,m->m_pkthdr.rcvif,ip_fw_chain) ) {
|
||||
goto bad;
|
||||
}
|
||||
|
||||
/*
|
||||
* Process options and, if not destined for us,
|
||||
|
|
Loading…
Reference in a new issue