diff options
| author |   mikeb <mikeb@openbsd.org> | 2013-02-26 14:56:05 +0000 |
|---|---|---|
| committer | mikeb <mikeb@openbsd.org> | 2013-02-26 14:56:05 +0000 |
| commit | f165d899710fd85bad73fb7858f749eeffe5eac5 (patch) | |
| tree | eb662316b8b386baf8a481bdf5ef251693d9ed00 | |
| parent | Reserve space for source and destination addresses unconditionally rather (diff) | |
| download | wireguard-openbsd-f165d899710fd85bad73fb7858f749eeffe5eac5.tar.xz wireguard-openbsd-f165d899710fd85bad73fb7858f749eeffe5eac5.zip | |
Don't try to purge one-time rules from the main ruleset.
Reported by Wesley M.A. on misc@, ok deraadt
| -rw-r--r-- | sys/net/pf_ioctl.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/sys/net/pf_ioctl.c b/sys/net/pf_ioctl.c index 426d8eaac01..e8d8b34dc6e 100644 --- a/sys/net/pf_ioctl.c +++ b/sys/net/pf_ioctl.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf_ioctl.c,v 1.256 2012/10/30 12:09:05 florian Exp $ */ +/* $OpenBSD: pf_ioctl.c,v 1.257 2013/02/26 14:56:05 mikeb Exp $ */ /* * Copyright (c) 2001 Daniel Hartmeier @@ -325,6 +325,9 @@ pf_purge_rule(struct pf_ruleset *ruleset, struct pf_rule *rule) { u_int32_t nr; + if (ruleset == NULL || ruleset->anchor == NULL) + return; + pf_rm_rule(ruleset->rules.active.ptr, rule); ruleset->rules.active.rcount--; |