Merge r281536
ClosedPublic
Actions

Authored by kp on Jun 15 2015, 10:27 AM.

Details

Reviewers

philip
gnn

Commits

rS284577: Merge r281536

Summary

pf: Fix forwarding detection

If the direction is not PF_OUT we can never be forwarding. Some input packets
have rcvif != ifp (looped back packets), which lead us to ip6_forward() inbound
packets, causing panics.

Equally, we need to ensure that packets were really received and not locally
generated before trying to ip6_forward() them.

Diff Detail

Repository

rS FreeBSD src repository - subversion

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

kp updated this revision to Diff 6205.Jun 15 2015, 10:27 AM

kp retitled this revision from to Merge r281536.

kp updated this object.

kp edited the test plan for this revision. (Show Details)

kp added reviewers: gnn, philip.

kp set the repository for this revision to rS FreeBSD src repository - subversion.

Herald added a subscriber: imp. · View Herald TranscriptJun 15 2015, 10:27 AM

kp added a parent revision: D2821: Merge r281234.Jun 15 2015, 10:28 AM

kp added a child revision: D2823: Merge r278874, r278925, r278868.

gnn accepted this revision.Jun 16 2015, 12:53 PM

gnn edited edge metadata.

This revision is now accepted and ready to land.Jun 16 2015, 12:53 PM

Closed by commit rS284577: Merge r281536 (authored by kp). · Explain WhyJun 18 2015, 8:59 PM

This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

Path

Size

stable/

10/

sys/

netpfil/

pf/

pf.c

2 lines

Diff 6307

View Options

stable/10