Page MenuHomeFreeBSD
Differential D56745

pf: do not reject rules with colliding hashes
ClosedPublic
Actions

Authored by kp on Apr 30 2026, 11:44 AM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Aug 17, 5:37 PM
Unknown Object (File)
Fri, Aug 14, 5:56 AM
Unknown Object (File)
Thu, Aug 13, 3:06 AM
Unknown Object (File)
Wed, Aug 12, 6:41 PM
Unknown Object (File)
Mon, Aug 10, 2:30 PM
Unknown Object (File)
Sun, Aug 9, 2:44 PM
Unknown Object (File)
Sat, Aug 8, 4:33 PM
Unknown Object (File)
Sat, Aug 8, 7:16 AM
View All 63 Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net

Details

Reviewers
mjg
Group Reviewers
pfsense
network
Commits
rG0cd655f71b46: pf: do not reject rules with colliding hashes
rGfab9bfc92751: pf: do not reject rules with colliding hashes
rGa0e4c65f1814: pf: do not reject rules with colliding hashes
Summary

We insert rules in pf_krule_global solely for the benefit of the
'keepcounters' feature. Failing to insert (beause the rule hash
collides, or an identical rule already exists) would be worse than
restoring counts to the wrong rule (or failing to restore them at all).

PR: 282863, 294860, 294859, 294858
MFC after: 3 days
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 72667
Build 69550: arc lint + arc unit

Revision Contents
Changeset List

PathSize
sys/
netpfil/
pf/
24 lines
tests/
sys/
netpfil/
pf/
36 lines

Diff 176896

View Options

sys/netpfil/pf/pf_ioctl.c

Loading...
View Options

tests/sys/netpfil/pf/match.sh

Loading...