=3D"padding: 0 0.25em; background-color: #E4E4E4;">pf=
: Fix a lock leak in pf_ioctl_addrule()

The ERROUT macro assumes that the rules lock is held, but some error
paths arise before that lock is acquired.  Introduce ERROUT_UNLOCKED for
that case.

Reviewed by:    kp
Reported by:    syzkaller
Fixes:          cc68decda316 ("pf: Reject rules with invalid port ra=
nges")
Differential Revision:  https://reviews.freebsd.org/D51571
</code></pre>
<hr>
<p dir=3D"auto">sys/amd64/conf/SYZKALLER  |  5 +++++<br>
sys/netpfil/pf/pf_ioctl.c | 16 ++++++++--------<br>
2 files changed, 13 insertions(+), 8 deletions(-)</p>
<p dir=3D"auto">diff --git a/sys/amd64/conf/SYZKALLER b/sys/amd64/conf/SY=
ZKALLER<br>
new file mode 100644<br>
index 000000000000..49059302793b<br>
--- /dev/null<br>
+++ b/sys/amd64/conf/SYZKALLER<br>
@@ -0,0 +1,5 @@<br>
+include GENERIC<br>
+ident SYZKALLER<br>
+<br>
+options 	COVERAGE<br>
+options 	KCOV</p>
</blockquote>
<p dir=3D"auto">^=E2=80=94 This hunk might not have been intended to be p=
art of this.</p>
<p dir=3D"auto">=E2=80=94<br>
Kristof</p>

</div>
</div>
</body>

</html>

--=_MailMate_F2A29105-5BD4-400E-B451-9F79A25EBDEF_=--