CVSROOT: /cvs Module name: src Changes by: da...@cvs.openbsd.org 2009/01/16 16:43:02
Modified files:
sys/net : pf.c
Log message:
In pf_test_rule(), if we don't create a state, free any state keys that
may have been allocated earlier by pf_get_translation(). Fixes a
pf_state_key_pl leak triggered by certain ICMP types matching a NAT
rule. Finally located with the help of pool_walk().
ok henning@ dlg@ mcbride@
