diff options
| author | glebius <glebius@FreeBSD.org> | 2013-02-15 09:03:56 +0000 |
|---|---|---|
| committer | glebius <glebius@FreeBSD.org> | 2013-02-15 09:03:56 +0000 |
| commit | f8098d720c2ce28997d30a5e615da3393337aa12 (patch) | |
| tree | 6ba1aba554fdcb05b2b43f0f7ff8be2c02815cd5 /sys/netpfil/pf | |
| parent | b9bd38a43112efa17a63a6df3fb174f3d9e24256 (diff) | |
| download | FreeBSD-src-f8098d720c2ce28997d30a5e615da3393337aa12.zip FreeBSD-src-f8098d720c2ce28997d30a5e615da3393337aa12.tar.gz | |
Finish the r244185. This fixes ever growing counter of pfsync bad
length packets, which was actually harmless.
Note that peers with different version of head/ may grow this
counter, but it is harmless - all pfsync data is processed.
Reported & tested by: Anton Yuzhaninov <citrin citrin.ru>
Sponsored by: Nginx, Inc
Diffstat (limited to 'sys/netpfil/pf')
| -rw-r--r-- | sys/netpfil/pf/if_pfsync.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/sys/netpfil/pf/if_pfsync.c b/sys/netpfil/pf/if_pfsync.c index 141ee6d..93f0729 100644 --- a/sys/netpfil/pf/if_pfsync.c +++ b/sys/netpfil/pf/if_pfsync.c @@ -99,8 +99,7 @@ __FBSDID("$FreeBSD$"); #define PFSYNC_MINPKT ( \ sizeof(struct ip) + \ sizeof(struct pfsync_header) + \ - sizeof(struct pfsync_subheader) + \ - sizeof(struct pfsync_eof)) + sizeof(struct pfsync_subheader) ) struct pfsync_pkt { struct ip *ip; |
