[Bug 217262] ipfw lookup tables match on index instead of value

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Mar 3 20:23:09 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217262

--- Comment #3 from commit-hook at freebsd.org ---
A commit references this bug:

Author: ae
Date: Fri Mar  3 20:22:42 UTC 2017
New revision: 314614
URL: https://svnweb.freebsd.org/changeset/base/314614

Log:
  Fix matching table entry value. Use real table value instead of its index
  in valuestate array.

  When opcode has size equal to ipfw_insn_u32, this means that it should
  additionally match value specified in d[0] with table entry value.
  ipfw_table_lookup() returns table value index, use TARG_VAL() macro to
  convert it to its value. The actual 32-bit value stored in the tag field
  of table_value structure, where all unspecified u32 values are kept.

  PR:           217262
  Reviewed by:  melifaro
  MFC after:    1 week
  Sponsored by: Yandex LLC

Changes:
  head/sys/netpfil/ipfw/ip_fw2.c

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the freebsd-ipfw mailing list