Differential D59015

pf: Fix fallout from the STATE_LOOKUP macro removal
ClosedPublic
Actions

Authored by markj on Aug 19 2026, 10:00 PM.

Tags

None

Referenced Files

	F172499337: D59015.diff
	Fri, Sep 18, 9:24 PM

	Unknown Object (File)
	Thu, Sep 17, 10:18 AM

	Unknown Object (File)
	Sat, Sep 12, 10:42 PM

	Unknown Object (File)
	Sat, Sep 12, 12:22 AM

	Unknown Object (File)
	Fri, Sep 11, 8:06 AM

	Unknown Object (File)
	Fri, Sep 11, 5:31 AM

	Unknown Object (File)
	Wed, Sep 9, 6:46 AM

	Unknown Object (File)
	Tue, Sep 8, 5:25 PM

View All 64 Files

Subscribers

vegeta_tuxpowered.net

Details

Reviewers

Commits

rG971d24f203dd: pf: Fix fallout from the STATE_LOOKUP macro removal
rG00a793def743: pf: Fix fallout from the STATE_LOOKUP macro removal

Summary

Commit 8572367b6814 ("pf: remove STATE_LOOKUP") introduced two seemingly
unintentional changes with respect to divert(4)-injected packets (i.e.,
the PACKET_LOOPED case): we no longer return the matching state, and
direct callers of pf_find_state() now treat matches of diverted packets
the same as having no matching state at all.

This seems inadvertent, and breaks certain rulesets which use divert-to.
Fix them, and add a regression test case.

Fixes: 8572367b6814 ("pf: remove STATE_LOOKUP")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 75769
Build 72652: arc lint + arc unit

Event Timeline

markj created this revision.Aug 19 2026, 10:00 PM

Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptAug 19 2026, 10:00 PM

markj requested review of this revision.Aug 19 2026, 10:00 PM

Harbormaster completed remote builds in B75769: Diff 184408.Aug 19 2026, 10:00 PM

Improve the test a bit: actually transmit some data, and verify that it was received.

Harbormaster completed remote builds in B75773: Diff 184412.Aug 19 2026, 10:15 PM

kp accepted this revision.Mon, Aug 24, 3:19 PM

This revision is now accepted and ready to land.Mon, Aug 24, 3:19 PM

Closed by commit rG00a793def743: pf: Fix fallout from the STATE_LOOKUP macro removal (authored by markj). · Explain WhyThu, Aug 27, 1:33 PM

This revision was automatically updated to reflect the committed changes.

markj added a commit: rG00a793def743: pf: Fix fallout from the STATE_LOOKUP macro removal.

markj added a commit: rG971d24f203dd: pf: Fix fallout from the STATE_LOOKUP macro removal.Thu, Sep 10, 9:14 AM

Revision Contents
Changeset List

Path

Size

sys/

netpfil/

pf/

17 lines

tests/

sys/

netpfil/

pf/

82 lines

Diff 184408

sys/netpfil/pf/pf.c

Loading...

tests/sys/netpfil/pf/route_to.sh

Loading...