svn commit: r286641 - head/sys/netpfil/pf

Mariusz Zaborski oshogbo at FreeBSD.org
Tue Aug 11 17:24:35 UTC 2015


Author: oshogbo
Date: Tue Aug 11 17:24:34 2015
New Revision: 286641
URL: https://svnweb.freebsd.org/changeset/base/286641

Log:
  Use correct src/dst ports when removing states.
  
  Submitted by:	Milosz Kaniewski <m.kaniewski at wheelsystems.com>,
  		UMEZAWA Takeshi <umezawa at iij.ad.jp> (orginal)
  Reviewed by:	glebius
  Approved by:	pjd (mentor)
  Obtained from:	OpenBSD
  MFC after:	3 days

Modified:
  head/sys/netpfil/pf/pf_ioctl.c

Modified: head/sys/netpfil/pf/pf_ioctl.c
==============================================================================
--- head/sys/netpfil/pf/pf_ioctl.c	Tue Aug 11 16:51:44 2015	(r286640)
+++ head/sys/netpfil/pf/pf_ioctl.c	Tue Aug 11 17:24:34 2015	(r286641)
@@ -1665,13 +1665,13 @@ relock_DIOCKILLSTATES:
 				if (s->direction == PF_OUT) {
 					srcaddr = &sk->addr[1];
 					dstaddr = &sk->addr[0];
-					srcport = sk->port[0];
+					srcport = sk->port[1];
 					dstport = sk->port[0];
 				} else {
 					srcaddr = &sk->addr[0];
 					dstaddr = &sk->addr[1];
 					srcport = sk->port[0];
-					dstport = sk->port[0];
+					dstport = sk->port[1];
 				}
 
 				if ((!psk->psk_af || sk->af == psk->psk_af)


More information about the svn-src-all mailing list