From e142fadecb5cca130e89a7f373202629f6c8a155 Mon Sep 17 00:00:00 2001
From: Luigi Rizzo <luigi@FreeBSD.org>
Date: Mon, 24 May 1999 10:01:22 +0000
Subject: close pr 10889: + add a missing call to dn_rule_delete() when
 flushing firewall   rules, thus preventing possible panics due to dangling
 pointers   (this was already done for single rule deletes). + improve "usage"
 output in ipfw(8) + add a few checks to ipfw pipe parameters and make it a
 bit more   tolerant of common mistakes (such as specifying kbit instead of
 Kbit)

PR: kern/10889
Submitted by: Ruslan Ermilov
---
 sys/netinet/ip_fw.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'sys')

diff --git a/sys/netinet/ip_fw.c b/sys/netinet/ip_fw.c
index f21410987d37..557dcf0ce6e0 100644
--- a/sys/netinet/ip_fw.c
+++ b/sys/netinet/ip_fw.c
@@ -12,7 +12,7 @@
  *
  * This software is provided ``AS IS'' without any warranties of any kind.
  *
- *	$Id: ip_fw.c,v 1.110 1999/04/26 14:57:24 luigi Exp $
+ *	$Id: ip_fw.c,v 1.111 1999/05/03 23:57:28 billf Exp $
  */
 
 /*
@@ -1175,6 +1175,9 @@ ip_fw_ctl(struct sockopt *sopt)
 		     fcp = ip_fw_chain.lh_first) {
 			s = splnet();
 			LIST_REMOVE(fcp, chain);
+#ifdef DUMMYNET
+			dn_rule_delete(fcp);
+#endif
 			FREE(fcp->rule, M_IPFW);
 			FREE(fcp, M_IPFW);
 			splx(s);
-- 
cgit v1.3