fr_check_wrapper: as ipf modifies application data as well when
doing application proxy, it's needed to ensure that the whole packet is writable here.
This commit is contained in:
parent
056303b850
commit
d676f9e5b0
|
@ -1,4 +1,4 @@
|
|||
/* $NetBSD: ip_fil_netbsd.c,v 1.15 2004/09/06 10:00:43 yamt Exp $ */
|
||||
/* $NetBSD: ip_fil_netbsd.c,v 1.16 2004/09/06 10:46:02 yamt Exp $ */
|
||||
|
||||
/*
|
||||
* Copyright (C) 1993-2003 by Darren Reed.
|
||||
|
@ -132,10 +132,9 @@ int dir;
|
|||
/*
|
||||
* ensure that mbufs are writable beforehand
|
||||
* as it's assumed by ipf code.
|
||||
* ip hdr (60 bytes) + tcp hdr (60 bytes) should be enough.
|
||||
* XXX inefficient
|
||||
*/
|
||||
error = m_makewritable(mp, 0, 60 + 60, M_DONTWAIT);
|
||||
error = m_makewritable(mp, 0, M_COPYALL, M_DONTWAIT);
|
||||
if (error) {
|
||||
m_freem(*mp);
|
||||
*mp = NULL;
|
||||
|
|
Loading…
Reference in New Issue