svn commit: r291773 - stable/9/sys/netpfil/ipfw

[Bryan Drewery]

Author: bdrewery
Date: Fri Dec  4 17:34:42 2015
New Revision: 291773
URL: https://svnweb.freebsd.org/changeset/base/291773

Log:
  MFC r291001:
  
    ipfw: Fix dynamic IPv6 rules showing junk for non-specified address masks.
  
  Relnotes:	yes

Modified:
  stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c
Directory Properties:
  stable/9/sys/   (props changed)
  stable/9/sys/netpfil/   (props changed)

Modified: stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c
==============================================================================
--- stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c	Fri Dec  4 17:33:33 2015	(r291772)
+++ stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c	Fri Dec  4 17:34:42 2015	(r291773)
@@ -715,6 +715,9 @@ ipfw_install_state(struct ip_fw *rule, i
 		id.fib = M_GETFIB(args->m);
 
 		if (IS_IP6_FLOW_ID (&(args->f_id))) {
+			bzero(&id.src_ip6, sizeof(id.src_ip6));
+			bzero(&id.dst_ip6, sizeof(id.dst_ip6));
+
 			if (limit_mask & DYN_SRC_ADDR)
 				id.src_ip6 = args->f_id.src_ip6;
 			if (limit_mask & DYN_DST_ADDR)