D46648.id143273.diff
No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

D46648.id143273.diff
View Options

	diff --git a/sys/netpfil/pf/pf_ioctl.c b/sys/netpfil/pf/pf_ioctl.c
	--- a/sys/netpfil/pf/pf_ioctl.c
	+++ b/sys/netpfil/pf/pf_ioctl.c
	@@ -6442,6 +6442,8 @@
	{
	int chk;

	+ CURVNET_ASSERT_SET();
	+
	chk = pf_test_eth(PF_IN, flags, ifp, m, inp);

	return (pf_check_return(chk, m));
	@@ -6453,6 +6455,8 @@
	{
	int chk;

	+ CURVNET_ASSERT_SET();
	+
	chk = pf_test_eth(PF_OUT, flags, ifp, m, inp);

	return (pf_check_return(chk, m));
	@@ -6465,6 +6469,8 @@
	{
	int chk;

	+ CURVNET_ASSERT_SET();
	+
	chk = pf_test(PF_IN, flags, ifp, m, inp, NULL);

	return (pf_check_return(chk, m));
	@@ -6476,6 +6482,8 @@
	{
	int chk;

	+ CURVNET_ASSERT_SET();
	+
	chk = pf_test(PF_OUT, flags, ifp, m, inp, NULL);

	return (pf_check_return(chk, m));
	@@ -6489,15 +6497,15 @@
	{
	int chk;

	+ CURVNET_ASSERT_SET();
	+
	/*
	* In case of loopback traffic IPv6 uses the real interface in
	* order to support scoped addresses. In order to support stateful
	* filtering we have change this to lo0 as it is the case in IPv4.
	*/
	- CURVNET_SET(ifp->if_vnet);
	chk = pf_test6(PF_IN, flags, (*m)->m_flags & M_LOOP ? V_loif : ifp,
	m, inp, NULL);
	- CURVNET_RESTORE();

	return (pf_check_return(chk, m));
	}
	@@ -6508,9 +6516,9 @@
	{
	int chk;

	- CURVNET_SET(ifp->if_vnet);
	+ CURVNET_ASSERT_SET();
	+
	chk = pf_test6(PF_OUT, flags, ifp, m, inp, NULL);
	- CURVNET_RESTORE();

	return (pf_check_return(chk, m));
	}