From c5bd0fc28bd50e256dc76600b340ac1e15b61021 Mon Sep 17 00:00:00 2001
From: henning <henning@openbsd.org>
Date: Wed, 7 Feb 2018 06:11:43 +0000
Subject: [PATCH] look ma, henning forgot to PF_LOCK/_UNLOCK in the new ioctls,
 ok procter

---
 sys/net/pf_ioctl.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/sys/net/pf_ioctl.c b/sys/net/pf_ioctl.c
index 231ff91b444..63f5c86ae45 100644
--- a/sys/net/pf_ioctl.c
+++ b/sys/net/pf_ioctl.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: pf_ioctl.c,v 1.329 2018/02/06 23:44:48 henning Exp $ */
+/*	$OpenBSD: pf_ioctl.c,v 1.330 2018/02/07 06:11:43 henning Exp $ */
 
 /*
  * Copyright (c) 2001 Daniel Hartmeier
@@ -2649,14 +2649,18 @@ pfioctl(dev_t dev, u_long cmd, caddr_t addr, int flags, struct proc *p)
 	case DIOCSETSYNFLWATS: {
 		struct pfioc_synflwats *io = (struct pfioc_synflwats *)addr;
 
+		PF_LOCK();
 		error = pf_syncookies_setwats(io->hiwat, io->lowat);
+		PF_UNLOCK();
 		break;
 	}
 
 	case DIOCSETSYNCOOKIES: {
 		u_int8_t	*mode = (u_int8_t *)addr;
 
+		PF_LOCK();
 		error = pf_syncookies_setmode(*mode);
+		PF_UNLOCK();
 		break;
 	}
 
-- 
2.20.1