Christian S.J. Peron 3a27af0dd4 Currently when ipfw(8) generates the micro-instructions for rules which ... contain O_UID, O_GID and O_JAIL opcodes, the F_NOT or F_OR logical operator bits get clobbered. Making it impossible to use the ``NOT'' or ``OR'' operators with uid, gid and jail based constraints. The ipfw_insn instruction template contains a ``len'' element which stores two pieces of information, the size of the instruction (in 32-bit words) in the low 6 bits of "len" with the 2 remaining bits to implement OR and NOT. The current code clobbers the OR and NOT bits by initializing the ``len'' element to the size, rather than OR'ing the bits. This change fixes this by changing the initialization of cmd->len to an OR operation for the O_UID, O_GID and O_JAIL opcodes. This may be a MFC candidate for RELENG_5. Reviewed by: andre Approved by: luigi PR: kern/63961 (partially)		2004-09-11 19:44:29 +00:00
..
ipfw2.c	Currently when ipfw(8) generates the micro-instructions for rules which	2004-09-11 19:44:29 +00:00
ipfw.8	Remove trailing whitespace and change "prisoniD" to "prisonID".	2004-08-13 02:50:59 +00:00
Makefile	Uncommented WARNS=0. ipfw2.c is full of printf format errors that are	2002-07-11 17:33:37 +00:00