svn commit: r340775 - stable/12/sys/netpfil/pf

[Kristof Provost]

Author: kp
Date: Thu Nov 22 19:56:50 2018
New Revision: 340775
URL: https://svnweb.freebsd.org/changeset/base/340775

Log:
  MFC r340265:
  
  pf: Prevent tables referenced by rules in anchors from getting disabled.
  
  PR:		183198
  Obtained from:	OpenBSD

Modified:
  stable/12/sys/netpfil/pf/pf_table.c
Directory Properties:
  stable/12/   (props changed)

Modified: stable/12/sys/netpfil/pf/pf_table.c
==============================================================================
--- stable/12/sys/netpfil/pf/pf_table.c	Thu Nov 22 19:49:52 2018	(r340774)
+++ stable/12/sys/netpfil/pf/pf_table.c	Thu Nov 22 19:56:50 2018	(r340775)
@@ -1754,6 +1754,7 @@ pfr_setflags_ktable(struct pfr_ktable *kt, int newf)
 	PF_RULES_WASSERT();
 
 	if (!(newf & PFR_TFLAG_REFERENCED) &&
+	    !(newf & PFR_TFLAG_REFDANCHOR) &&
 	    !(newf & PFR_TFLAG_PERSIST))
 		newf &= ~PFR_TFLAG_ACTIVE;
 	if (!(newf & PFR_TFLAG_ACTIVE))