ipfw: pmod: avoid further rule processing after tcp-mod failuresHEADmain

m_pullup() here will have freed the mbuf chain, but we pass back an
IP_FW_DENY without any signal that the outer loop should finish.  Thus,
rule processing continues without an mbuf and there's a chance that we
conclude that the packet may pass (but there's no mbuf remaining)
depending on the rules that follow it.

PR:		284606
Reviewed by:	ae
MFC after:	1 week

0 files changed, 0 insertions, 0 deletions