Christian S.J. Peron 3a27af0dd4 Currently when ipfw(8) generates the micro-instructions for rules which
contain O_UID, O_GID and O_JAIL opcodes, the F_NOT or F_OR logical
operator bits get clobbered. Making it impossible to use the ``NOT'' or
``OR'' operators with uid, gid and jail based constraints.

The ipfw_insn instruction template contains a ``len'' element which
stores two pieces of information, the size of the instruction
(in 32-bit words) in the low 6 bits of "len" with the 2 remaining
bits to implement OR and NOT.

The current code clobbers the OR and NOT bits by initializing the
``len'' element to the size, rather than OR'ing the bits. This change
fixes this by changing the initialization of cmd->len to an OR operation
for the O_UID, O_GID and O_JAIL opcodes.

This may be a MFC candidate for RELENG_5.

Reviewed by:	andre
Approved by:	luigi
PR:		kern/63961 (partially)
2004-09-11 19:44:29 +00:00
..
2004-07-03 00:13:43 +00:00
2004-07-03 00:13:43 +00:00
2004-07-07 19:57:16 +00:00
2004-02-23 20:25:27 +00:00
2004-07-28 05:59:22 +00:00
2004-07-03 00:13:43 +00:00
2004-09-01 08:26:39 +00:00
2004-07-28 05:59:22 +00:00
2004-08-07 07:52:31 +00:00
2004-08-04 00:23:00 +00:00
2004-05-17 21:05:39 +00:00
2004-02-23 20:25:27 +00:00
2004-02-23 20:25:27 +00:00
2004-02-23 20:25:27 +00:00
2004-02-23 20:25:27 +00:00
2004-02-23 20:25:27 +00:00
2004-02-23 20:25:27 +00:00
2004-07-07 19:57:16 +00:00
2004-01-27 19:28:13 +00:00
2004-09-08 08:44:14 +00:00
2004-02-23 20:25:27 +00:00
2004-05-17 21:24:06 +00:00
2004-02-23 20:25:27 +00:00
2004-05-20 16:40:06 +00:00
2004-07-24 19:11:40 +00:00