1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-10-18 02:19:39 +00:00
freebsd/sbin/pfctl
Kristof Provost 35237559a6 pfctl: delay label macro expansion until after rule optimisation
We used to expand the $nr macro in labels into the rule number prior to
the optimisation step. This would occasionally produce incorrect rule
numbers in the labels.

Delay all macro expansion until after the optimisation step to ensure
that we expand the correct values.

MFC after:	1 week
Reported by:	Özkan KIRIK <ozkan.kirik@gmail.com>
Differential Revision:	https://reviews.freebsd.org/D32488

(cherry picked from commit 09c7f23869)
2021-10-22 09:34:25 +02:00
..
tests pfctl tests: Test fairq configuration 2021-05-27 09:10:53 +02:00
Makefile pfctl: Move ioctl abstraction functions into libpfctl 2021-05-07 10:15:42 +02:00
Makefile.depend
parse.y pfctl: delay label macro expansion until after rule optimisation 2021-10-22 09:34:25 +02:00
pf_print_state.c pfctl: cache getprotobynumber results 2021-07-05 11:32:14 +00:00
pf_ruleset.c pf: match keyword support 2021-07-31 10:12:02 +02:00
pf.os
pfctl_altq.c pfctl: Fix crash on ALTQ configuration 2021-05-27 09:09:55 +02:00
pfctl_ioctl.h pfctl: Move ioctl abstraction functions into libpfctl 2021-05-07 10:15:42 +02:00
pfctl_optimize.c libpfctl: Switch to pfctl_rule 2021-05-07 10:15:42 +02:00
pfctl_osfp.c
pfctl_parser.c pfctl: userspace adaptive syncookies configration 2021-10-06 10:46:54 +02:00
pfctl_parser.h pfctl: Remove unused variable 2021-10-22 09:32:24 +02:00
pfctl_qstats.c
pfctl_radix.c
pfctl_table.c
pfctl.8 pf: Support killing 'matching' states 2021-05-14 10:42:07 +02:00
pfctl.c pfctl: delay label macro expansion until after rule optimisation 2021-10-22 09:34:25 +02:00
pfctl.h pfctl: delay label macro expansion until after rule optimisation 2021-10-22 09:34:25 +02:00