diff options
| author |   kn <kn@openbsd.org> | 2019-03-06 19:49:05 +0000 |
|---|---|---|
| committer | kn <kn@openbsd.org> | 2019-03-06 19:49:05 +0000 |
| commit | 6da84b37b3f3e88426bb98c24d021b664f406547 (patch) | |
| tree | 08ad6ade21d100b3d348dc11bd05a7b17e5b75dd /usr.bin/ssh/serverloop.c | |
| parent | Simplify startup code, various phases are heading straight towards exit (diff) | |
| download | wireguard-openbsd-6da84b37b3f3e88426bb98c24d021b664f406547.tar.xz wireguard-openbsd-6da84b37b3f3e88426bb98c24d021b664f406547.zip | |
Fix once rules
parse.y revision 1.682 from 16.07.2018 errornously allowed `match once' and
`anchor "a" once'.
Fix both by checking for PF_DROP not PF_MATCH and creating anchors in the
parser already such that they can be used to distinguish anchor rules in
the same check as well.
Found and fixed by Petr Hoffmann <petr.hoffmann at oracle dot com>, thanks!
While here, remove an unneeded cast and make pfctl_add_rule() void as it
always returned 0.
OK sashan
Diffstat (limited to 'usr.bin/ssh/serverloop.c')
0 files changed, 0 insertions, 0 deletions