From 4ff58cfcd1ab8014b4029aaa802d9fdcdd78ce07 Mon Sep 17 00:00:00 2001 From: ae Date: Wed, 26 Jun 2019 17:21:30 +0000 Subject: [PATCH] Merge from stable/11: Fix the uninitialized use of source IPv6 address in NAT64LSN. This code is already refactored in head/, but due to the missing epoch(9) support it is impossible to merge. So, it is direct commit to stable/11. Reported by: Patrick M. Hausen Tested by: Patrick M. Hausen Approved by: re (kib, gjb) --- sys/netpfil/ipfw/nat64/nat64lsn.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sys/netpfil/ipfw/nat64/nat64lsn.c b/sys/netpfil/ipfw/nat64/nat64lsn.c index 1ddeaafc7dc..63b4a719482 100644 --- a/sys/netpfil/ipfw/nat64/nat64lsn.c +++ b/sys/netpfil/ipfw/nat64/nat64lsn.c @@ -408,6 +408,7 @@ nat64lsn_translate4(struct nat64lsn_cfg *cfg, const struct ipfw_flow_id *f_id, } else logdata = NULL; + src6 = cfg->base.plat_prefix; nat64_embed_ip4(&src6, cfg->base.plat_plen, htonl(f_id->src_ip)); ret = nat64_do_handle_ip4(*pm, &src6, &nh->addr, lport, &cfg->base, logdata); -- 2.45.0