The branch main has been updated by ae: URL: https://cgit.FreeBSD.org/src/commit/?id=8012c61bef3bb19a48d8459b38b65e27d46c186c
commit 8012c61bef3bb19a48d8459b38b65e27d46c186c Author: Boris Lytochkin <[email protected]> AuthorDate: 2025-11-18 10:31:56 +0000 Commit: Andrey V. Elsukov <[email protected]> CommitDate: 2025-11-18 10:31:56 +0000 ipfw: fix lookup dst-ip opcode Opcode handling should not fall through to the LOOKUP_DSCP type. Reviewed by: melifaro Obtained from: Yandex LLC MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D53775 --- sys/netpfil/ipfw/ip_fw2.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sys/netpfil/ipfw/ip_fw2.c b/sys/netpfil/ipfw/ip_fw2.c index d15d7760d7f1..c27b6bc274fb 100644 --- a/sys/netpfil/ipfw/ip_fw2.c +++ b/sys/netpfil/ipfw/ip_fw2.c @@ -2120,8 +2120,8 @@ do { \ pkey = &args->f_id.dst_ip6; else pkey = &args->f_id.src_ip6; - } else /* only for L3 */ - break; + } + break; case LOOKUP_DSCP: if (is_ipv4) key = ip->ip_tos >> 2;
