From fbff7925a133d45c4511f61818c53393501ce9dc Mon Sep 17 00:00:00 2001
From: ae <ae@FreeBSD.org>
Date: Wed, 24 Feb 2016 13:16:03 +0000
Subject: Fix bug in filling and handling ipfw's O_DSCP opcode. Due to integer
 overflow CS4 token was handled as BE.

PR:		207459
MFC after:	1 week
---
 sbin/ipfw/ipfw2.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'sbin/ipfw')

diff --git a/sbin/ipfw/ipfw2.c b/sbin/ipfw/ipfw2.c
index 366f77f..f6a9692 100644
--- a/sbin/ipfw/ipfw2.c
+++ b/sbin/ipfw/ipfw2.c
@@ -1029,7 +1029,7 @@ fill_dscp(ipfw_insn *cmd, char *av, int cblen)
 				errx(EX_DATAERR, "Invalid DSCP value");
 		}
 
-		if (code > 32)
+		if (code >= 32)
 			*high |= 1 << (code - 32);
 		else
 			*low |= 1 << code;
-- 
cgit v1.1