svn commit: r361832 - stable/11/sys/netpfil/ipfw
Andrey V. Elsukov
ae at FreeBSD.org
Fri Jun 5 09:58:59 UTC 2020
Author: ae
Date: Fri Jun 5 09:58:59 2020
New Revision: 361832
URL: https://svnweb.freebsd.org/changeset/base/361832
Log:
MFC r361624:
Fix O_IP_FLOW_LOOKUP opcode handling.
Do not check table value matching when table lookup has failed.
Modified:
stable/11/sys/netpfil/ipfw/ip_fw2.c
Directory Properties:
stable/11/ (props changed)
Modified: stable/11/sys/netpfil/ipfw/ip_fw2.c
==============================================================================
--- stable/11/sys/netpfil/ipfw/ip_fw2.c Fri Jun 5 09:56:51 2020 (r361831)
+++ stable/11/sys/netpfil/ipfw/ip_fw2.c Fri Jun 5 09:58:59 2020 (r361832)
@@ -2066,6 +2066,8 @@ do { \
uint32_t v = 0;
match = ipfw_lookup_table(chain,
cmd->arg1, 0, &args->f_id, &v);
+ if (!match)
+ break;
if (cmdlen == F_INSN_SIZE(ipfw_insn_u32))
match = ((ipfw_insn_u32 *)cmd)->d[0] ==
TARG_VAL(chain, v, tag);
More information about the svn-src-stable-11
mailing list