Subject: CVS commit: src/sys/dist/ipf/netinet
To: None <source-changes@NetBSD.org>
From: Christos Zoulas <christos@netbsd.org>
List: source-changes
Date: 11/25/2004 09:49:12
Module Name:	src
Committed By:	christos
Date:		Thu Nov 25 09:49:12 UTC 2004

Modified Files:
	src/sys/dist/ipf/netinet: fil.c

Log Message:
PR/28418: Do not drop packets for which we cannot add state, because adding
state is not applicable. The fix just reverts the new code that blocked
packets where fr_addstate() fails. This is not correct in all cases, but
blocking them is a bit drastic and breaks existing functionality. The proper
fix is to change fr_addstate() to return:

- state added
- adding state failed
- adding state is not applicable

and then filter packets only in the second case. I am leaving this for someone
else.


To generate a diff of this commit:
cvs rdiff -r1.4 -r1.5 src/sys/dist/ipf/netinet/fil.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.