Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 8 Nov 2018 21:54:40 +0000 (UTC)
From:      Kristof Provost <kp@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   svn commit: r340265 - head/sys/netpfil/pf
Message-ID:  <201811082154.wA8LseEv092826@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: kp
Date: Thu Nov  8 21:54:40 2018
New Revision: 340265
URL: https://svnweb.freebsd.org/changeset/base/340265

Log:
  pf: Prevent tables referenced by rules in anchors from getting disabled.
  
  PR:		183198
  Obtained from:	OpenBSD
  MFC after:	2 weeks

Modified:
  head/sys/netpfil/pf/pf_table.c

Modified: head/sys/netpfil/pf/pf_table.c
==============================================================================
--- head/sys/netpfil/pf/pf_table.c	Thu Nov  8 21:53:09 2018	(r340264)
+++ head/sys/netpfil/pf/pf_table.c	Thu Nov  8 21:54:40 2018	(r340265)
@@ -1754,6 +1754,7 @@ pfr_setflags_ktable(struct pfr_ktable *kt, int newf)
 	PF_RULES_WASSERT();
 
 	if (!(newf & PFR_TFLAG_REFERENCED) &&
+	    !(newf & PFR_TFLAG_REFDANCHOR) &&
 	    !(newf & PFR_TFLAG_PERSIST))
 		newf &= ~PFR_TFLAG_ACTIVE;
 	if (!(newf & PFR_TFLAG_ACTIVE))



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201811082154.wA8LseEv092826>