diff options
| author | YASUOKA Masahiko <yasuoka@cvs.openbsd.org> | 2015-03-16 02:40:56 +0000 |
|---|---|---|
| committer | YASUOKA Masahiko <yasuoka@cvs.openbsd.org> | 2015-03-16 02:40:56 +0000 |
| commit | 5235c3e94b9a271edc2a9bf8c85270404dd0dc83 (patch) | |
| tree | 6873f9104f39f81572a69cd8019ea94c7a2e4325 /sys/net | |
| parent | 19da14515dd6e34cfdf310311da722b3dc075791 (diff) | |
When state creations happen in short term by outgoing packets of one
SO_BINDANY socket, the new state didn't have a link of the socket's
pcb. So the incoming packets allowed by the state were mistakenly
forwarded and the pcb could not get them. Fix pf not to lost the link
of the pcb when the state is recreated.
ok bluhm mikeb
Diffstat (limited to 'sys/net')
| -rw-r--r-- | sys/net/pf.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/sys/net/pf.c b/sys/net/pf.c index 0b073894ca4..fe7341d94bc 100644 --- a/sys/net/pf.c +++ b/sys/net/pf.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf.c,v 1.907 2015/03/14 03:38:51 jsg Exp $ */ +/* $OpenBSD: pf.c,v 1.908 2015/03/16 02:40:55 yasuoka Exp $ */ /* * Copyright (c) 2001 Daniel Hartmeier @@ -4279,6 +4279,7 @@ pf_test_state(struct pf_pdesc *pd, struct pf_state **state, u_short *reason) int copyback = 0; struct pf_state_peer *src, *dst; int action = PF_PASS; + struct inpcb *inp; key.af = pd->af; key.proto = pd->virtual_proto; @@ -4287,6 +4288,7 @@ pf_test_state(struct pf_pdesc *pd, struct pf_state **state, u_short *reason) PF_ACPY(&key.addr[pd->didx], pd->dst, key.af); key.port[pd->sidx] = pd->osport; key.port[pd->didx] = pd->odport; + inp = pd->m->m_pkthdr.pf.inp; STATE_LOOKUP(pd->kif, &key, pd->dir, *state, pd->m); @@ -4315,6 +4317,7 @@ pf_test_state(struct pf_pdesc *pd, struct pf_state **state, u_short *reason) (*state)->src.state = (*state)->dst.state = TCPS_CLOSED; pf_unlink_state(*state); *state = NULL; + pd->m->m_pkthdr.pf.inp = inp; return (PF_DROP); } |