Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 29 Jun 2010 16:57:30 +0000 (UTC)
From:      Gleb Smirnoff <glebius@FreeBSD.org>
To:        cvs-src-old@freebsd.org
Subject:   cvs commit: src/sys/netinet/ipfw ip_fw2.c
Message-ID:  <201006291657.o5TGvjSQ050161@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
glebius     2010-06-29 16:57:30 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet/ipfw     ip_fw2.c 
  Log:
  SVN rev 209589 on 2010-06-29 16:57:30Z by glebius
  
  After processing the O_SKIPTO opcode our cmd points to the next rule, and
  "match" processing at the end of inner loop would look ahead into the next
  rule, which is incorrect. Particularly, in the case when the next rule
  started with F_NOT opcode it was skipped blindly.
  
  To fix this, exit the inner loop with the continue operator forcibly and
  explicitly.
  
  PR:             kern/147798
  
  Revision  Changes    Path
  1.43      +3 -2      src/sys/netinet/ipfw/ip_fw2.c



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201006291657.o5TGvjSQ050161>