pfsync_state_import() must not be called with the pf state lock held,
authorpatrick <patrick@openbsd.org>
Tue, 9 Feb 2021 23:37:54 +0000 (23:37 +0000)
committerpatrick <patrick@openbsd.org>
Tue, 9 Feb 2021 23:37:54 +0000 (23:37 +0000)
commitd7220220b7edab0576584f12b36dc5556e577b7d
tree0f399b542124a7ba394af48069535e8e4e1ac227
parenta2081208f9230276447f3fcf445aff046baece5a
pfsync_state_import() must not be called with the pf state lock held,
since the actual modification of the state table is done by a call to
pf_state_insert(), which takes the pf state lock itself.  Other calls
to pfsync_state_import() also only have the pf lock.

Reported-by: syzbot+d6ea8620b43dc69ecbc6@syzkaller.appspotmail.com
ok bluhm@
sys/net/pf_ioctl.c