diff options
| -rw-r--r-- | sys/net/pf_ioctl.c | 16 |
1 files changed, 6 insertions, 10 deletions
diff --git a/sys/net/pf_ioctl.c b/sys/net/pf_ioctl.c index 124cf7e420a..dbbc79c0a0e 100644 --- a/sys/net/pf_ioctl.c +++ b/sys/net/pf_ioctl.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf_ioctl.c,v 1.372 2022/02/09 11:42:58 sashan Exp $ */ +/* $OpenBSD: pf_ioctl.c,v 1.373 2022/02/16 04:25:34 dlg Exp $ */ /* * Copyright (c) 2001 Daniel Hartmeier @@ -1370,15 +1370,6 @@ pfioctl(dev_t dev, u_long cmd, caddr_t addr, int flags, struct proc *p) break; } - if (rule->scrub_flags & PFSTATE_SETPRIO && - (rule->set_prio[0] > IFQ_MAXPRIO || - rule->set_prio[1] > IFQ_MAXPRIO)) { - error = EINVAL; - pf_rule_free(rule); - rule = NULL; - break; - } - NET_LOCK(); PF_LOCK(); pr->anchor[sizeof(pr->anchor) - 1] = '\0'; @@ -3071,6 +3062,11 @@ pf_rule_copyin(struct pf_rule *from, struct pf_rule *to) { int i; + if (from->scrub_flags & PFSTATE_SETPRIO && + (from->set_prio[0] > IFQ_MAXPRIO || + from->set_prio[1] > IFQ_MAXPRIO)) + return (EINVAL); + to->src = from->src; to->src.addr.p.tbl = NULL; to->dst = from->dst; |