diff options
| author | Henning Brauer <henning@cvs.openbsd.org> | 2008-09-03 12:51:40 +0000 |
|---|---|---|
| committer | Henning Brauer <henning@cvs.openbsd.org> | 2008-09-03 12:51:40 +0000 |
| commit | d0bdba835012178a8c73de060eeef22550990560 (patch) | |
| tree | a7fa07e5f0464b7f32d36d0dad72e109b0e3f0f7 /sys/netinet/tcp_output.c | |
| parent | e7fac48853ecb5c360c29c074404c3a3b9aedf2a (diff) | |
do not set the pkthdr mbuf state key pointer to the state key saved in the
pcb. the state key ptr in the pcb is the one that had to be used by pf
outbound. but by convention the state key pointer in the pkthdr is the one
used INbound, so pf follows its reverse pointer to find the sk to use,
and since a reverse doesn't exist for locally terminated connections the
reverse pointer is null and thus the whole game a noop.
note that this only affects packets FROM local udp/tcp sockets, for the
other direction everything works as expected.
Diffstat (limited to 'sys/netinet/tcp_output.c')
| -rw-r--r-- | sys/netinet/tcp_output.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/sys/netinet/tcp_output.c b/sys/netinet/tcp_output.c index bd06ea95f25..8e0ca68f182 100644 --- a/sys/netinet/tcp_output.c +++ b/sys/netinet/tcp_output.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tcp_output.c,v 1.85 2008/07/03 15:46:24 henning Exp $ */ +/* $OpenBSD: tcp_output.c,v 1.86 2008/09/03 12:51:39 henning Exp $ */ /* $NetBSD: tcp_output.c,v 1.16 1997/06/03 16:17:09 kml Exp $ */ /* @@ -761,7 +761,6 @@ send: } m->m_pkthdr.rcvif = (struct ifnet *)0; m->m_pkthdr.len = hdrlen + len; - m->m_pkthdr.pf.statekey = tp->t_inpcb->inp_pf_sk; if (!tp->t_template) panic("tcp_output"); |