CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2022/12/23 22:20:32
Modified files:
sys/net : pf.c
Log message:
fix and enable toeplitz hashing of pf_state_keys again.
the hash generated when setting up the pf pdesc struct uses outer
addresses, while the addresses used in the state table goes through
pf_state_key_addr_setup(), which does interesting things with some
ipv6 icmp values. state lookups used pf_state_key_addr_setup(), but
pf_state_key_setup copied the pdesc value, causing an inconsistency.
pf_state_key_setup now calls pf_state_key_addr_setup().
found by anton@
tested by anton@ florian@
