pf: Fix hashing of IP address ranges

This corrects the false detection of duplicate rules.

MFC after:	1 week
Reviewed by:	kp

This commit is contained in:

Michael Gmelin

2026-03-12 15:18:09 +01:00

committed by

Kristof Provost

parent 73f72ca08d

commit 1fa873c93c

1 changed files with 1 additions and 0 deletions

									
										sys/netpfil/pf/pf_ioctl.c
									
		+1
		
												View File
												
				@@ -1359,6 +1359,7 @@ pf_hash_rule_addr(MD5_CTX *ctx, struct pf_rule_addr *pfr)

								PF_MD5_UPD(pfr, addr.v.tblname);

							break;

						case PF_ADDR_ADDRMASK:

						case PF_ADDR_RANGE:

							/* XXX ignore af? */

							PF_MD5_UPD(pfr, addr.v.a.addr.addr32);

							PF_MD5_UPD(pfr, addr.v.a.mask.addr32);