CVS: cvs.openbsd.org: src

[Cedric Berger <cedric_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	cedric_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2003/03/14 05:36:40

Modified files:
	sys/net        : pf_table.c 

Log message:
Correctly flag out radix_node entries with RNF_ROOT flag set: this is not
a match. Before that patch, an IP packet with source or dest address of
0.0.0.0 could corrupt the kernel. People filtering DHCP packets on their
firewall using tables should upgrade their kernel now.
Thanks to Chris Cappuccio for the good bug report.
Ok dhartmei@ henning@