git: c6fb3ad1533b - stable/15 - ixl: enforce the assigned VF MAC address

Kevin Bowling <[email protected]>
Newsgroups gmane.os.freebsd.devel.cvs.src
Message-ID <6a723244.32455.c477ce3__16965.4699087673$1785868886$gmane$org@gitrepo.freebsd.org>
The branch stable/15 has been updated by kbowling:

URL: https://cgit.FreeBSD.org/src/commit/?id=c6fb3ad1533b23ab72e9a15593153c6676447f28

commit c6fb3ad1533b23ab72e9a15593153c6676447f28
Author:     Kevin Bowling <[email protected]>
AuthorDate: 2026-08-01 02:38:54 +0000
Commit:     Kevin Bowling <[email protected]>
CommitDate: 2026-08-04 18:40:58 +0000

    ixl: enforce the assigned VF MAC address
    
    When allow-set-mac is disabled, the MAC filter validation condition
    rejects the assigned VF unicast address while allowing any different
    unicast address. The equality test was accidentally inverted when this
    code moved to the boolean address helper.
    
    Accept multicast and the assigned unicast address, and reject other
    unicast addresses as intended.
    
    Fixes:          7d4dceec1030 ("ixl(4): Fix VLAN HW filtering")
    
    (cherry picked from commit d2309d9d6dc6d5a9141314652d6c96ab46a9a62c)
---
 sys/dev/ixl/ixl_pf_iov.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/sys/dev/ixl/ixl_pf_iov.c b/sys/dev/ixl/ixl_pf_iov.c
index ca2759557066..1e475e4767cc 100644
--- a/sys/dev/ixl/ixl_pf_iov.c
+++ b/sys/dev/ixl/ixl_pf_iov.c
@@ -1022,7 +1022,7 @@ ixl_vf_mac_valid(struct ixl_vf *vf, const uint8_t *addr)
 	 * is not its assigned MAC.
 	 */
 	if (!(vf->vf_flags & VF_FLAG_SET_MAC_CAP) &&
-	    !(ETHER_IS_MULTICAST(addr) || !ixl_ether_is_equal(addr, vf->mac)))
+	    !(ETHER_IS_MULTICAST(addr) || ixl_ether_is_equal(addr, vf->mac)))
 		return (EPERM);
 
 	return (0);
@@ -1824,4 +1824,3 @@ out:
 
 	return (error);
 }
-
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.