Remove any stale mbuf tags from packets being injected into a netgraph
graph. In particular, this solves some issues with (probably leaked) IPSec-related tags being looped back through netgraph to the inbound path which then misinterpreted the stale tags. MFC after: 7 days
This commit is contained in:
parent
d9b6ab3a76
commit
58d8fd049f
@ -236,6 +236,9 @@ ng_eiface_start2(node_p node, hook_p hook, void *arg1, int arg2)
|
||||
if (m == NULL)
|
||||
break;
|
||||
|
||||
/* Peel the mbuf off any stale tags */
|
||||
m_tag_delete_chain(m, NULL);
|
||||
|
||||
/*
|
||||
* Berkeley packet filter.
|
||||
* Pass packet to bpf if there is a listener.
|
||||
|
Loading…
x
Reference in New Issue
Block a user