svn commit: r340265 - head/sys/netpfil/pf

[Kristof Provost]

Author: kp
Date: Thu Nov  8 21:54:40 2018
New Revision: 340265
URL: https://svnweb.freebsd.org/changeset/base/340265

Log:
  pf: Prevent tables referenced by rules in anchors from getting disabled.
  
  PR:		183198
  Obtained from:	OpenBSD
  MFC after:	2 weeks

Modified:
  head/sys/netpfil/pf/pf_table.c

Modified: head/sys/netpfil/pf/pf_table.c
==============================================================================
--- head/sys/netpfil/pf/pf_table.c	Thu Nov  8 21:53:09 2018	(r340264)
+++ head/sys/netpfil/pf/pf_table.c	Thu Nov  8 21:54:40 2018	(r340265)
@@ -1754,6 +1754,7 @@ pfr_setflags_ktable(struct pfr_ktable *kt, int newf)
 	PF_RULES_WASSERT();
 
 	if (!(newf & PFR_TFLAG_REFERENCED) &&
+	    !(newf & PFR_TFLAG_REFDANCHOR) &&
 	    !(newf & PFR_TFLAG_PERSIST))
 		newf &= ~PFR_TFLAG_ACTIVE;
 	if (!(newf & PFR_TFLAG_ACTIVE))