upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-02-20 00:11:07 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

jail: Correctly access IPv[46] addresses of prison_ip

Browse source 
* Fix wrong IPv[46] addresses inherited from parent jail
* Properly restrict the child jail's IPv[46] addresses

Reviewed by:	melifaro, glebius
Approved by:	kp (mentor)
Fixes:	eb8dcdeac2 jail: network epoch protection for IP address lists
Differential Revision:	https://reviews.freebsd.org/D37871
Differential Revision:	https://reviews.freebsd.org/D37872
This commit is contained in:
Zhenlei Huang 2023-01-13 17:50:01 +08:00
parent 692e19cf51
commit ddbf879d79
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
sys/kern/kern_jail.c
View file

@ -654,7 +654,7 @@ prison_ip_dup(struct prison *ppr, struct prison *pr, const pr_family_t af)
if (ppr->pr_addrs[af] != NULL) {
pr->pr_addrs[af] = prison_ip_alloc(af,
ppr->pr_addrs[af]->ips, M_WAITOK);
bcopy(ppr->pr_addrs[af], pr->pr_addrs[af],
bcopy(ppr->pr_addrs[af] + 1, pr->pr_addrs[af] + 1,
pr->pr_addrs[af]->ips * pr_families[af].size);
}
}
@ -814,7 +814,7 @@ prison_ip_restrict(struct prison *pr, const pr_family_t af,
alloced = false;
if (!(pr->pr_flags & pr_families[af].ip_flag)) {
/* This has no user settings, so just copy the parent's list. */
bcopy(ppip, new, ips * size);
bcopy(ppip + 1, new + 1, ips * size);
} else {
/* Remove addresses that aren't in the parent. */
int i;
@ -846,7 +846,7 @@ prison_ip_restrict(struct prison *pr, const pr_family_t af,
i++;
break;
case 0:
bcopy(PR_IP(pr, i), PR_IPD(new, ips), size);
bcopy(PR_IP(pip, i), PR_IPD(new, ips), size);
i++;
pi++;
ips++;