CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2023/11/23 16:45:10
Modified files: sys/net : if_veb.c Log message: avoid passing weird mbuf chains to pf when pushing out a veb. pf expects the ip header to be in the first mbuf of the chain we pass to pf_test, but in some situations the ethernet header is the only data in the first mbuf. after we remove the ethernet header, the first mbuf had no data in it which confused pf. fix this by passing all packets to ip_check on output as well as input. ip input handlers do all the necessary m_pullups. found by Mark Patruck.