diff options
author | 2010-02-04 14:10:12 +0000 | |
---|---|---|
committer | 2010-02-04 14:10:12 +0000 | |
commit | 0c449d8997416a3237f58655ac29a655a936c8d5 (patch) | |
tree | 5f353cf2cf08a4158dea84ab8547064bb66b1aa6 /usr.bin/tmux/tmux.h | |
parent | remove assumption that internal IFSD_LINK* defines are the same as (diff) | |
download | wireguard-openbsd-0c449d8997416a3237f58655ac29a655a936c8d5.tar.xz wireguard-openbsd-0c449d8997416a3237f58655ac29a655a936c8d5.zip |
pf_get_sport() picks a random port from the port range specified in a
nat rule. It should check to see if it's in-use (i.e. matches an existing
PF state), if it is, it cycles sequentially through other ports until
it finds a free one. However the check was being done with the state
keys the wrong way round so it was never actually finding the state
to be in-use.
- switch the keys to correct this, avoiding random state collisions
with nat. Fixes PR 6300 and problems reported by robert@ and viq.
- check pf_get_sport() return code in pf_test(); if port allocation
fails the packet should be dropped rather than sent out untranslated.
Help/ok claudio@.
Diffstat (limited to 'usr.bin/tmux/tmux.h')
0 files changed, 0 insertions, 0 deletions