summaryrefslogtreecommitdiffstats
path: root/sys
diff options
context:
space:
mode:
authorjca <jca@openbsd.org>2014-03-27 12:07:48 +0000
committerjca <jca@openbsd.org>2014-03-27 12:07:48 +0000
commitd00192b6ce94736e549a16d2a103094e99d89079 (patch)
tree26b834d1c730437165ce44f151e69ede3eca0fbb /sys
parentfix a theoretical double free. (diff)
downloadwireguard-openbsd-d00192b6ce94736e549a16d2a103094e99d89079.tar.xz
wireguard-openbsd-d00192b6ce94736e549a16d2a103094e99d89079.zip
When enforcing TOS (Traffic Class), preserve the ECN bits, just as we do
with IPv4 packets. ok mikeb@
Diffstat (limited to 'sys')
-rw-r--r--sys/net/pf_norm.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/net/pf_norm.c b/sys/net/pf_norm.c
index 614f6428803..f0342fc7191 100644
--- a/sys/net/pf_norm.c
+++ b/sys/net/pf_norm.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: pf_norm.c,v 1.164 2014/01/22 04:34:25 henning Exp $ */
+/* $OpenBSD: pf_norm.c,v 1.165 2014/03/27 12:07:48 jca Exp $ */
/*
* Copyright 2001 Niels Provos <provos@citi.umich.edu>
@@ -1464,7 +1464,7 @@ pf_scrub(struct mbuf *m, u_int16_t flags, sa_family_t af, u_int8_t min_ttl,
#ifdef INET6
if (af == AF_INET6) {
/* drugs are unable to explain such idiocy */
- h6->ip6_flow &= ~htonl(0x0ff00000);
+ h6->ip6_flow &= ~htonl(0x0fc00000);
h6->ip6_flow |= htonl(((u_int32_t)tos) << 20);
}
#endif