diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2004-01-16 21:15:43 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2004-01-16 21:15:43 +0000 |
| commit | 5655eab97fa8be637112e37c1a85a4d2adf905f6 (patch) | |
| tree | d26c020d8b68d14b804f72758adddaefca299422 /sys/net/pf_norm.c | |
| parent | e0344e5585afed5d5a10ab18da480a921b180857 (diff) | |
Fix IPv6 stateful tcp scrubbing by not dereferencing a null pointer.
ok dhartmei@ frantzen@
Diffstat (limited to 'sys/net/pf_norm.c')
| -rw-r--r-- | sys/net/pf_norm.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/net/pf_norm.c b/sys/net/pf_norm.c index cf2e897baba..04d2e488036 100644 --- a/sys/net/pf_norm.c +++ b/sys/net/pf_norm.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf_norm.c,v 1.77 2003/12/31 11:18:25 cedric Exp $ */ +/* $OpenBSD: pf_norm.c,v 1.78 2004/01/16 21:15:42 mcbride Exp $ */ /* * Copyright 2001 Niels Provos <provos@citi.umich.edu> @@ -1410,7 +1410,7 @@ pf_normalize_tcp_stateful(struct mbuf *m, int off, struct pf_pdesc *pd, #endif /* INET */ #ifdef INET6 case AF_INET6: { - if (dst->scrub) { + if (src->scrub) { struct ip6_hdr *h = mtod(m, struct ip6_hdr *); if (h->ip6_hlim > src->scrub->pfss_ttl) src->scrub->pfss_ttl = h->ip6_hlim; |