diff options
| author | Michael Gmelin <grembo@FreeBSD.org> | 2026-03-12 14:18:09 +0000 |
|---|---|---|
| committer | Kristof Provost <kp@FreeBSD.org> | 2026-03-24 04:27:20 +0000 |
| commit | 1fa873c93c8b08561c53107c7b90c53dfad30ddc (patch) | |
| tree | 54c0b5e6583106072b6daaa7e3d91dfc07cb1fc0 | |
| parent | 73f72ca08dbb13ad186e6b33420015d51d0d5b17 (diff) | |
pf: Fix hashing of IP address ranges
This corrects the false detection of duplicate rules.
MFC after: 1 week
Reviewed by: kp
| -rw-r--r-- | sys/netpfil/pf/pf_ioctl.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netpfil/pf/pf_ioctl.c b/sys/netpfil/pf/pf_ioctl.c index 12a2189207f1..fa331449fcf9 100644 --- a/sys/netpfil/pf/pf_ioctl.c +++ b/sys/netpfil/pf/pf_ioctl.c @@ -1359,6 +1359,7 @@ pf_hash_rule_addr(MD5_CTX *ctx, struct pf_rule_addr *pfr) PF_MD5_UPD(pfr, addr.v.tblname); break; case PF_ADDR_ADDRMASK: + case PF_ADDR_RANGE: /* XXX ignore af? */ PF_MD5_UPD(pfr, addr.v.a.addr.addr32); PF_MD5_UPD(pfr, addr.v.a.mask.addr32); |