git: 38f8ac568273 - stable/15 - pf: Fix hashing of IP address ranges
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 25 Mar 2026 10:53:58 UTC
The branch stable/15 has been updated by kp:
URL: https://cgit.FreeBSD.org/src/commit/?id=38f8ac568273fde3f41582c6bc01ea4b2c9dc029
commit 38f8ac568273fde3f41582c6bc01ea4b2c9dc029
Author: Michael Gmelin <grembo@FreeBSD.org>
AuthorDate: 2026-03-12 14:18:09 +0000
Commit: Kristof Provost <kp@FreeBSD.org>
CommitDate: 2026-03-25 07:11:57 +0000
pf: Fix hashing of IP address ranges
This corrects the false detection of duplicate rules.
MFC after: 1 week
Reviewed by: kp
(cherry picked from commit 1fa873c93c8b08561c53107c7b90c53dfad30ddc)
---
sys/netpfil/pf/pf_ioctl.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/sys/netpfil/pf/pf_ioctl.c b/sys/netpfil/pf/pf_ioctl.c
index d0fd6476727e..915a09a05297 100644
--- a/sys/netpfil/pf/pf_ioctl.c
+++ b/sys/netpfil/pf/pf_ioctl.c
@@ -1350,6 +1350,7 @@ pf_hash_rule_addr(MD5_CTX *ctx, struct pf_rule_addr *pfr)
PF_MD5_UPD(pfr, addr.v.tblname);
break;
case PF_ADDR_ADDRMASK:
+ case PF_ADDR_RANGE:
/* XXX ignore af? */
PF_MD5_UPD(pfr, addr.v.a.addr.addr32);
PF_MD5_UPD(pfr, addr.v.a.mask.addr32);