Author: bdrewery
Date: Fri Dec  4 17:34:42 2015
New Revision: 291773
URL: https://svnweb.freebsd.org/changeset/base/291773

Log:
  MFC r291001:
  
    ipfw: Fix dynamic IPv6 rules showing junk for non-specified address masks.
  
  Relnotes:     yes

Modified:
  stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c
Directory Properties:
  stable/9/sys/   (props changed)
  stable/9/sys/netpfil/   (props changed)

Modified: stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c
==============================================================================
--- stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c   Fri Dec  4 17:33:33 2015        
(r291772)
+++ stable/9/sys/netpfil/ipfw/ip_fw_dynamic.c   Fri Dec  4 17:34:42 2015        
(r291773)
@@ -715,6 +715,9 @@ ipfw_install_state(struct ip_fw *rule, i
                id.fib = M_GETFIB(args->m);
 
                if (IS_IP6_FLOW_ID (&(args->f_id))) {
+                       bzero(&id.src_ip6, sizeof(id.src_ip6));
+                       bzero(&id.dst_ip6, sizeof(id.dst_ip6));
+
                        if (limit_mask & DYN_SRC_ADDR)
                                id.src_ip6 = args->f_id.src_ip6;
                        if (limit_mask & DYN_DST_ADDR)
_______________________________________________
svn-src-stable-9@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-stable-9
To unsubscribe, send any mail to "svn-src-stable-9-unsubscr...@freebsd.org"

Reply via email to