From owner-freebsd-ports-bugs@FreeBSD.ORG Mon Jun 13 00:30:13 2011 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 221681065674 for ; Mon, 13 Jun 2011 00:30:13 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 700FF8FC15 for ; Mon, 13 Jun 2011 00:30:10 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p5D0UAaQ070559 for ; Mon, 13 Jun 2011 00:30:10 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p5D0UAhs070556; Mon, 13 Jun 2011 00:30:10 GMT (envelope-from gnats) Resent-Date: Mon, 13 Jun 2011 00:30:10 GMT Resent-Message-Id: <201106130030.p5D0UAhs070556@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Dmitry Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C475A106566B for ; Mon, 13 Jun 2011 00:26:43 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22]) by mx1.freebsd.org (Postfix) with ESMTP id B54DD8FC0C for ; Mon, 13 Jun 2011 00:26:43 +0000 (UTC) Received: from red.freebsd.org (localhost [127.0.0.1]) by red.freebsd.org (8.14.4/8.14.4) with ESMTP id p5D0Qhve005725 for ; Mon, 13 Jun 2011 00:26:43 GMT (envelope-from nobody@red.freebsd.org) Received: (from nobody@localhost) by red.freebsd.org (8.14.4/8.14.4/Submit) id p5D0Qh6Z005724; Mon, 13 Jun 2011 00:26:43 GMT (envelope-from nobody) Message-Id: <201106130026.p5D0Qh6Z005724@red.freebsd.org> Date: Mon, 13 Jun 2011 00:26:43 GMT From: Dmitry To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/157807: security/sshguard-ipfw fails to work with -b option X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jun 2011 00:30:13 -0000 >Number: 157807 >Category: ports >Synopsis: security/sshguard-ipfw fails to work with -b option >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Jun 13 00:30:09 UTC 2011 >Closed-Date: >Last-Modified: >Originator: Dmitry >Release: 8.2-RELEASE >Organization: >Environment: FreeBSD oemcomp.openair 8.2-RELEASE-p1 FreeBSD 8.2-RELEASE-p1 #1: Tue May 3 00:14:15 EEST 2011 root@oemcomp.openair:/usr/obj/usr/src/sys/TELIASONERA i386 >Description: security/sshguard-ipfw fails to work with -b option. If this option is enabled, sshguard fails to work with ipfw: Assertion failed: (addresses[0] != NULL), function ipfwmod_buildblockcommand, file ipfw.c, line 291. Abort trap: 6 >How-To-Repeat: # cd /usr/ports/security/sshguard-ipfw && make install clean # /usr/local/sbin/sshguard -a 4 -b 10:/var/db/blacklist.db >Fix: http://sourceforge.net/tracker/?func=detail&aid=3252151&group_id=188282&atid=924685 /usr/ports/security/sshguard/files/patch-sshguard.c Patch attached with submission follows: --- src/sshguard.c.orig 2010-08-09 08:44:15.000000000 +0200 +++ src/sshguard.c 2011-03-28 11:42:42.000000000 +0200 @@ -566,9 +566,13 @@ /* terminate array list */ addresses[i] = NULL; /* do block addresses of this kind */ - if (fw_block_list(addresses, addrkind, service_codes) != FWALL_OK) { - sshguard_log(LOG_CRIT, "While blocking blacklisted addresses, the firewall refused to block!"); - } + if (addresses[0] == NULL) { + sshguard_log(LOG_DEBUG, "No %s addresses in loaded blacklist.", (addrkind == ADDRKIND_IPv4) ? "IPv4" : "IPv6"); + } else { + if (fw_block_list(addresses, addrkind, service_codes) != FWALL_OK) { + sshguard_log(LOG_CRIT, "While blocking blacklisted addresses, the firewall refused to block!"); + } + } } /* free temporary arrays */ free(addresses); >Release-Note: >Audit-Trail: >Unformatted: