Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Nov 2018 19:56:52 +0000 (UTC)
From:      Kristof Provost <kp@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-11@freebsd.org
Subject:   svn commit: r340776 - stable/11/sys/netpfil/pf
Message-ID:  <201811221956.wAMJuqmB083816@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: kp
Date: Thu Nov 22 19:56:51 2018
New Revision: 340776
URL: https://svnweb.freebsd.org/changeset/base/340776

Log:
  MFC r340265:
  
  pf: Prevent tables referenced by rules in anchors from getting disabled.
  
  PR:		183198
  Obtained from:	OpenBSD

Modified:
  stable/11/sys/netpfil/pf/pf_table.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/netpfil/pf/pf_table.c
==============================================================================
--- stable/11/sys/netpfil/pf/pf_table.c	Thu Nov 22 19:56:50 2018	(r340775)
+++ stable/11/sys/netpfil/pf/pf_table.c	Thu Nov 22 19:56:51 2018	(r340776)
@@ -1747,6 +1747,7 @@ pfr_setflags_ktable(struct pfr_ktable *kt, int newf)
 	PF_RULES_WASSERT();
 
 	if (!(newf & PFR_TFLAG_REFERENCED) &&
+	    !(newf & PFR_TFLAG_REFDANCHOR) &&
 	    !(newf & PFR_TFLAG_PERSIST))
 		newf &= ~PFR_TFLAG_ACTIVE;
 	if (!(newf & PFR_TFLAG_ACTIVE))



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201811221956.wAMJuqmB083816>