From 4a7ac5a9139afc26d2d1e192c65b4996508ef389 Mon Sep 17 00:00:00 2001 From: sashan Date: Wed, 1 Jun 2022 17:34:13 +0000 Subject: [PATCH] callers to pf(4) must continue to run with packet as returned by firewall. OK dlg@ --- sys/net/if_veb.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sys/net/if_veb.c b/sys/net/if_veb.c index 67185fde228..b24eab61115 100644 --- a/sys/net/if_veb.c +++ b/sys/net/if_veb.c @@ -1,4 +1,4 @@ -/* $OpenBSD: if_veb.c,v 1.28 2022/05/15 21:37:29 bluhm Exp $ */ +/* $OpenBSD: if_veb.c,v 1.29 2022/06/01 17:34:13 sashan Exp $ */ /* * Copyright (c) 2021 David Gwynne @@ -944,14 +944,14 @@ veb_broadcast(struct veb_softc *sc, struct veb_port *rp, struct mbuf *m0, * let pf look at it, but use the veb interface as a proxy. */ if (ISSET(ifp->if_flags, IFF_LINK1) && - (m = veb_pf(ifp, PF_OUT, m0)) == NULL) + (m0 = veb_pf(ifp, PF_OUT, m0)) == NULL) return; #endif #if 0 && defined(IPSEC) /* same goes for ipsec */ if (ISSET(ifp->if_flags, IFF_LINK2) && - (m = veb_ipsec_out(ifp, m0)) == NULL) + (m0 = veb_ipsec_out(ifp, m0)) == NULL) return; #endif -- 2.20.1