CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2022/02/15 21:25:34
Modified files:
sys/net : pf_ioctl.c
Log message:
check pf rule "set prio" values consistently.
consistently means we do the check in pf_rule_copyin() so both
DIOCADDRULE and DIOCCHANGERULE have the prio values checked. this in
turn prevents invalid prio values getting set on a rule via
DIOCCHANGERULE.
this was caught by a kassert in the ifq priq code firing.
Reported-by: syzbot+a8f8e24a44b441e71...@syzkaller.appspotmail.com
ok sashan@
