]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC r334876:
authorkp <kp@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sat, 16 Jun 2018 11:42:27 +0000 (11:42 +0000)
committerkp <kp@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sat, 16 Jun 2018 11:42:27 +0000 (11:42 +0000)
commit39b60e8b4618fc96506796d0012be302a2cf837b
tree4c1b22ba960f851f2bcfefc4344e782eab0c8954
parente6c6de94a6a4b4022f90df097fe6a8c0b0b728a9
MFC r334876:

pf: Fix deadlock with route-to

If a locally generated packet is routed (with route-to/reply-to/dup-to) out of
a different interface it's passed through the firewall again. This meant we
lost the inp pointer and if we required the pointer (e.g. for user ID matching)
we'd deadlock trying to acquire an inp lock we've already got.

Pass the inp pointer along with pf_route()/pf_route6().

PR: 228782

git-svn-id: svn://svn.freebsd.org/base/stable/10@335252 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/netpfil/pf/pf.c