[Winpcap-bugs] bpf_validate() needs to do more checks

[Guy Harris]

On Dec 2, 2005, at 3:51 PM, Loris Degioanni wrote:

> Guy Harris wrote:
>> BTW, what do those new instructions do?  At some point I might  
>> want  to see whether it's OK to pick up some additional  
>> instructions from  the BSD/OS BPF interpreter - it has some  
>> instructions to scan IPv6  headers to find the last header in the  
>> header chain, which would let  us do a better job of handling the  
>> IPv6 "protochain" operator
>
> Do they have support for this operator in the compiler too?

They might, but all I've seen is their bpf_filter() implementation.   
It shouldn't be that hard to add support for it in the compiler.

I think they also cleaned up some other things, e.g. adding an  
indexed version of some instructions.