The branch main has been updated by ks: URL: https://cgit.FreeBSD.org/src/commit/?id=e3767e149b6d8674d9637999bc4153e6fe1a82b7
commit e3767e149b6d8674d9637999bc4153e6fe1a82b7 Author: Kajetan Staszkiewicz <[email protected]> AuthorDate: 2026-09-04 09:18:26 +0000 Commit: Kajetan Staszkiewicz <[email protected]> CommitDate: 2026-09-04 10:02:26 +0000 pf: Fix uninitialised action when dropping bad TTL ND packets Approved by: kp Sponsored by: InnoGames GmbH Differential Revision: https://reviews.freebsd.org/D58755 --- sys/netpfil/pf/pf.c | 1 + 1 file changed, 1 insertion(+) diff --git a/sys/netpfil/pf/pf.c b/sys/netpfil/pf/pf.c index 54cf68cee50e..04e919639ddb 100644 --- a/sys/netpfil/pf/pf.c +++ b/sys/netpfil/pf/pf.c @@ -11405,6 +11405,7 @@ pf_setup_pdesc(sa_family_t af, int dir, struct pf_pdesc *pd, struct mbuf **m0, case ND_ROUTER_ADVERT: case ND_REDIRECT: if (pd->ttl != 255) { + *action = PF_DROP; REASON_SET(reason, PFRES_NORM); return (PF_DROP); }
