summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorhenning <henning@openbsd.org>2002-09-27 17:57:53 +0000
committerhenning <henning@openbsd.org>2002-09-27 17:57:53 +0000
commite350c47deea93f3bb3234a5efa5848a35c1493dd (patch)
tree79e9bc8f97f6a37e15979549d08a9bbb4325f8e0
parentclarify compression level protocol 1 only; ok markus@ deraadt@ (diff)
downloadwireguard-openbsd-e350c47deea93f3bb3234a5efa5848a35c1493dd.tar.xz
wireguard-openbsd-e350c47deea93f3bb3234a5efa5848a35c1493dd.zip
daddr was used where saddr was meant while checking incoming packets for
binat. pointed out by Ryan McBride, mcbride at countersiege dot com, Thanks! ok frantzen@ pb@ jasoni@ deraadt@
-rw-r--r--sys/net/pf.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/net/pf.c b/sys/net/pf.c
index 91eda53aa1e..5c5de26e73f 100644
--- a/sys/net/pf.c
+++ b/sys/net/pf.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: pf.c,v 1.244 2002/09/11 05:38:47 itojun Exp $ */
+/* $OpenBSD: pf.c,v 1.245 2002/09/27 17:57:53 henning Exp $ */
/*
* Copyright (c) 2001 Daniel Hartmeier
@@ -1915,7 +1915,7 @@ pf_test_udp(struct pf_rule **rm, int direction, struct ifnet *ifp,
}
/* check incoming packet for BINAT */
else if ((binat = pf_get_binat(PF_IN, ifp, IPPROTO_UDP,
- daddr, daddr, af)) != NULL) {
+ daddr, saddr, af)) != NULL) {
PF_ACPY(&baddr, daddr, af);
bport = uh->uh_dport;
pf_change_ap(daddr, &uh->uh_dport, pd->ip_sum,