When parent rule of dynamic state is deleted and net.inet.ip.fw.dyn_keep_states is enabled, such states are called ORPHANED.
Orphaned states still keep pointer to original parent rule. In case when rule action is skipto this can lead to unpredictable consequences.
To avoid this problem add special handling for skipto action when we have found ORPHANED state.
Check that new rule has the same opcode and skipto number for O_SKIPTO rule action.
Details
Details
Diff Detail
Diff Detail
- Repository
- rG FreeBSD src repository
- Lint
Lint Passed - Unit
No Test Coverage - Build Status
Buildable 65612 Build 62495: arc lint + arc unit