From 0409dbb19cf907f13d79b094ceab02e1fc42f509 Mon Sep 17 00:00:00 2001
From: glebius <glebius@FreeBSD.org>
Date: Tue, 18 Sep 2012 09:15:32 +0000
Subject: Fix DIOCNATLOOK: zero key padding before performing lookup.

---
 sys/netpfil/pf/pf_ioctl.c | 1 +
 1 file changed, 1 insertion(+)

(limited to 'sys/netpfil/pf')

diff --git a/sys/netpfil/pf/pf_ioctl.c b/sys/netpfil/pf/pf_ioctl.c
index 032f051..d2d580d 100644
--- a/sys/netpfil/pf/pf_ioctl.c
+++ b/sys/netpfil/pf/pf_ioctl.c
@@ -1808,6 +1808,7 @@ DIOCGETSTATES_full:
 		    (!pnl->dport || !pnl->sport)))
 			error = EINVAL;
 		else {
+			bzero(&key, sizeof(key));
 			key.af = pnl->af;
 			key.proto = pnl->proto;
 			PF_ACPY(&key.addr[sidx], &pnl->saddr, pnl->af);
-- 
cgit v1.1