diff options
| author | ae <ae@FreeBSD.org> | 2016-02-24 13:16:03 +0000 |
|---|---|---|
| committer | ae <ae@FreeBSD.org> | 2016-02-24 13:16:03 +0000 |
| commit | fbff7925a133d45c4511f61818c53393501ce9dc (patch) | |
| tree | 772bdd4c489ed227f89e79db56e6677c158a2c15 /sys/netpfil | |
| parent | 96081091e737f454bfb88ec5b1fa6e285a535027 (diff) | |
| download | FreeBSD-src-fbff7925a133d45c4511f61818c53393501ce9dc.zip FreeBSD-src-fbff7925a133d45c4511f61818c53393501ce9dc.tar.gz | |
Fix bug in filling and handling ipfw's O_DSCP opcode.
Due to integer overflow CS4 token was handled as BE.
PR: 207459
MFC after: 1 week
Diffstat (limited to 'sys/netpfil')
| -rw-r--r-- | sys/netpfil/ipfw/ip_fw2.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netpfil/ipfw/ip_fw2.c b/sys/netpfil/ipfw/ip_fw2.c index 750c812..2d0d2f4 100644 --- a/sys/netpfil/ipfw/ip_fw2.c +++ b/sys/netpfil/ipfw/ip_fw2.c @@ -1711,7 +1711,7 @@ do { \ break; /* DSCP bitmask is stored as low_u32 high_u32 */ - if (x > 32) + if (x >= 32) match = *(p + 1) & (1 << (x - 32)); else match = *p & (1 << x); |
