artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0671dac) | patch
check pf NAT source port allocation against net.inet.(tcp|udp).baddynamic
authordjm <djm@openbsd.org>
Thu, 10 Jul 2008 07:41:21 +0000 (07:41 +0000)
committerdjm <djm@openbsd.org>
Thu, 10 Jul 2008 07:41:21 +0000 (07:41 +0000)
commita660254b685134bea3524fcfd3531c32f46b9ef2
tree4bfe494963fe44734d65007e07f9cdd7dc5dc3fbtree | snapshot
parent0671dac0cf93e4d07d85872fe5b7f10e117b971fcommit | diff
check pf NAT source port allocation against net.inet.(tcp|udp).baddynamic
lists; prevents use of ports corresponding to well-known services.

replace a couple of arc4random()%N with arc4random_uniform(N) that
missed the first round.

ok mcbride@
sys/net/pf.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim