diff options
| author |   henning <henning@openbsd.org> | 2011-07-28 11:03:49 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2011-07-28 11:03:49 +0000 |
| commit | 96909b1162394996b9f542726e5fd0f2b98b570c (patch) | |
| tree | 8a22efa5b5e0fc44c0b1c7dad09ac12d640f10bb /sys | |
| parent | Resolve sysctl numbers, original diff from nicm@, man page bits from (diff) | |
| download | wireguard-openbsd-96909b1162394996b9f542726e5fd0f2b98b570c.tar.xz wireguard-openbsd-96909b1162394996b9f542726e5fd0f2b98b570c.zip | |
fix set skip group matching: don't match partial strings, i. e. 'set skip on
lo' must not match a group 'local'. diff from sthen who is not around for a
few days, ok me and mpf. I can't find the mail of the guy who initially
ran into this problem, sorry for that, thanks for reporting!
Diffstat (limited to 'sys')
| -rw-r--r-- | sys/net/pf_if.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/net/pf_if.c b/sys/net/pf_if.c index a46302557ed..d63897fd2e9 100644 --- a/sys/net/pf_if.c +++ b/sys/net/pf_if.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf_if.c,v 1.62 2011/05/20 22:50:44 sthen Exp $ */ +/* $OpenBSD: pf_if.c,v 1.63 2011/07/28 11:03:49 henning Exp $ */ /* * Copyright 2005 Henning Brauer <henning@openbsd.org> @@ -728,7 +728,7 @@ pfi_skip_if(const char *filter, struct pfi_kif *p) return (1); /* group names may not end in a digit */ if (p->pfik_ifp != NULL) TAILQ_FOREACH(i, &p->pfik_ifp->if_groups, ifgl_next) - if (!strncmp(i->ifgl_group->ifg_group, filter, n)) + if (!strncmp(i->ifgl_group->ifg_group, filter, IFNAMSIZ)) return (0); /* iface is in group "filter" */ return (1); } |