Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 24 Mar 2026 06:03:54 +0000
From:      Kristof Provost <kp@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Cc:        Michael Gmelin <grembo@FreeBSD.org>
Subject:   git: 1fa873c93c8b - main - pf: Fix hashing of IP address ranges
Message-ID:  <69c2294a.3f5f8.2a9a0f10@gitrepo.freebsd.org>

index | next in thread | raw e-mail

The branch main has been updated by kp:

URL: https://cgit.FreeBSD.org/src/commit/?id=1fa873c93c8b08561c53107c7b90c53dfad30ddc

commit 1fa873c93c8b08561c53107c7b90c53dfad30ddc
Author:     Michael Gmelin <grembo@FreeBSD.org>
AuthorDate: 2026-03-12 14:18:09 +0000
Commit:     Kristof Provost <kp@FreeBSD.org>
CommitDate: 2026-03-24 04:27:20 +0000

    pf: Fix hashing of IP address ranges
    
    This corrects the false detection of duplicate rules.
    
    MFC after:      1 week
    Reviewed by:    kp
---
 sys/netpfil/pf/pf_ioctl.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sys/netpfil/pf/pf_ioctl.c b/sys/netpfil/pf/pf_ioctl.c
index 12a2189207f1..fa331449fcf9 100644
--- a/sys/netpfil/pf/pf_ioctl.c
+++ b/sys/netpfil/pf/pf_ioctl.c
@@ -1359,6 +1359,7 @@ pf_hash_rule_addr(MD5_CTX *ctx, struct pf_rule_addr *pfr)
 				PF_MD5_UPD(pfr, addr.v.tblname);
 			break;
 		case PF_ADDR_ADDRMASK:
+		case PF_ADDR_RANGE:
 			/* XXX ignore af? */
 			PF_MD5_UPD(pfr, addr.v.a.addr.addr32);
 			PF_MD5_UPD(pfr, addr.v.a.mask.addr32);


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?69c2294a.3f5f8.2a9a0f10>