opnsense-src/lib/libpfctl
Kristof Provost b70fadca62 pf: fix dealing with 0 limits
uma doesn't like setting a limit on a zone which previously had none.
At startup pf applies the default limit to all zones, so we can assume a limit
was always set. We cope with the uma limitation by translating a limit of '0'
(i.e. unlimited) to INT_MAX. This is high enough that we'll never realistically
hit this limit, but it keeps uma happy.

Add a test case to provoke this, and while we're here also fix syncookie
handling of a 0 state limit.

See also:	d53927b0ba
Reported-by:	syzbot+02b784f183f79d4c07e4@syzkaller.appspotmail.com
Sponsored by:	Rubicon Communications, LLC ("Netgate")
2025-05-08 15:10:25 +02:00
..
libpfctl.c pf: fix dealing with 0 limits 2025-05-08 15:10:25 +02:00
libpfctl.h pf: convert DIOCRCLRADDRS to netlink 2025-05-08 15:10:25 +02:00
Makefile Remove residual blank line at start of Makefile 2024-07-15 16:43:39 -06:00
Makefile.depend dirdeps: Update Makefile.depend* files with empty contents 2023-10-29 17:01:04 -04:00