From 97f7efa9e3316e4e8970a87a1ee53fd4fd0075d8 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Tue, 10 Sep 2019 11:07:25 -0400 Subject: pf: when extracting an IPv6 address, make sure we got an IPv6 address Our code assumes that when we're configured to get IPv6 addresses out of a TRANS_PF transparent proxy connection, we actually will. But we didn't check that, and so FreeBSD started warning us about a potential NULL pointer dereference. Fixes part of bug 31687; bugfix on 0.2.3.4-alpha when this code was added. --- changes/ticket31687_2 | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 changes/ticket31687_2 (limited to 'changes/ticket31687_2') diff --git a/changes/ticket31687_2 b/changes/ticket31687_2 new file mode 100644 index 0000000000..eadc698275 --- /dev/null +++ b/changes/ticket31687_2 @@ -0,0 +1,5 @@ + o Minor bugfixes (FreeBSD, PF-based proxy, IPv6): + - When extracting an IPv6 address from a PF-based proxy, verify + that we are actually configured to receive an IPv6 address, + and log an internal error if not. Fixes part of bug 31687; + bugfix on 0.2.3.4-alpha. -- cgit v1.2.3-54-g00ecf