ae a4f88db4df Fix the problem with O_LIMIT states introduced in r344018. ...

dyn_install_state() uses `rule` pointer when it creates state.
For O_LIMIT states this pointer actually is not struct ip_fw,
it is pointer to O_LIMIT_PARENT state, that keeps actual pointer
to ip_fw parent rule. Thus we need to cache rule id and number
before calling dyn_get_parent_state(), so we can use them later
when the `rule` pointer is overrided.

PR:		236292
MFC after:	3 days

2019-03-07 04:40:44 +00:00

..

ipfw

Fix the problem with O_LIMIT states introduced in r344018.

2019-03-07 04:40:44 +00:00

pf

pf: IPv6 fragments with malformed extension headers could be erroneously passed by pf or cause a panic

2019-03-01 07:37:45 +00:00