diff options
| author | bdrewery <bdrewery@FreeBSD.org> | 2015-12-04 17:33:33 +0000 |
|---|---|---|
| committer | bdrewery <bdrewery@FreeBSD.org> | 2015-12-04 17:33:33 +0000 |
| commit | b490558ee69797c8ad222f42606ea4ebb09a9b90 (patch) | |
| tree | e82abb8d1c69010936be8095e44418b68a1c94f6 /sys/netpfil | |
| parent | 72c7e45913048bf7a7a9f4f898363ea802ba3ab7 (diff) | |
| download | FreeBSD-src-b490558ee69797c8ad222f42606ea4ebb09a9b90.zip FreeBSD-src-b490558ee69797c8ad222f42606ea4ebb09a9b90.tar.gz | |
MFC r291001:
ipfw: Fix dynamic IPv6 rules showing junk for non-specified address masks.
Relnotes: yes
Diffstat (limited to 'sys/netpfil')
| -rw-r--r-- | sys/netpfil/ipfw/ip_fw_dynamic.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/netpfil/ipfw/ip_fw_dynamic.c b/sys/netpfil/ipfw/ip_fw_dynamic.c index a166d12..81c1b2c 100644 --- a/sys/netpfil/ipfw/ip_fw_dynamic.c +++ b/sys/netpfil/ipfw/ip_fw_dynamic.c @@ -715,6 +715,9 @@ ipfw_install_state(struct ip_fw *rule, ipfw_insn_limit *cmd, id.fib = M_GETFIB(args->m); if (IS_IP6_FLOW_ID (&(args->f_id))) { + bzero(&id.src_ip6, sizeof(id.src_ip6)); + bzero(&id.dst_ip6, sizeof(id.dst_ip6)); + if (limit_mask & DYN_SRC_ADDR) id.src_ip6 = args->f_id.src_ip6; if (limit_mask & DYN_DST_ADDR) |
