d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

In r343631 error code for a packet blocked by a firewall was

Browse Source 
changed from EACCES to EPERM.  This change was not intentional,
so fix that.  Return EACCESS if a firewall forbids sending.

Noticed by:	ae
This commit is contained in:
Gleb Smirnoff 2020-01-01 17:31:43 +00:00
parent d3eae2a68e
commit 8d5c56dab1
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=356252
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sys/net/if_bridge.c
View File

@ -3191,7 +3191,7 @@ bridge_pfil(struct mbuf **mp, struct ifnet *bifp, struct ifnet *ifp, int dir)
dir == PFIL_OUT && ifp != NULL) {
switch (pfil_run_hooks(V_link_pfil_head, mp, ifp, dir, NULL)) {
case PFIL_DROPPED:
return (EPERM);
return (EACCES);
case PFIL_CONSUMED:
return (0);
}
@ -3312,7 +3312,7 @@ bridge_pfil(struct mbuf **mp, struct ifnet *bifp, struct ifnet *ifp, int dir)
case PFIL_CONSUMED:
return (0);
case PFIL_DROPPED:
return (EPERM);
return (EACCES);
default:
break;
}

2
sys/netinet/ip_output.c
View File

@ -130,7 +130,7 @@ ip_output_pfil(struct mbuf **mp, struct ifnet *ifp, int flags,
odst.s_addr = ip->ip_dst.s_addr;
switch (pfil_run_hooks(V_inet_pfil_head, mp, ifp, pflags, inp)) {
case PFIL_DROPPED:
*error = EPERM;
*error = EACCES;
/* FALLTHROUGH */
case PFIL_CONSUMED:
return 1; /* Finished */