bsd/net/pf.c

1304 pf_insert_src_node(struct pf_src_node **sn, struct pf_rule *rule,
1309 	if (*sn == NULL) {
1318 		*sn = RB_FIND(pf_src_tree, &tree_src_tracking, &k);
1320 	if (*sn == NULL) {
1323 			(*sn) = pool_get(&pf_src_tree_pl, PR_WAITOK);
1326 		if ((*sn) == NULL)
1328 		bzero(*sn, sizeof (struct pf_src_node));
1330 		pf_init_threshold(&(*sn)->conn_rate,
1334 		(*sn)->af = af;
1337 			(*sn)->rule.ptr = rule;
1339 			(*sn)->rule.ptr = NULL;
1340 		PF_ACPY(&(*sn)->addr, src, af);
1342 		    &tree_src_tracking, *sn) != NULL) {
1345 				pf_print_host(&(*sn)->addr, 0, af);
1348 			pool_put(&pf_src_tree_pl, *sn);
1351 		(*sn)->creation = pf_time_second();
1352 		(*sn)->ruletype = rule->action;
1353 		if ((*sn)->rule.ptr != NULL)
1354 			(*sn)->rule.ptr->src_nodes++;
1359 		    (*sn)->states >= rule->max_src_states) {
2986     struct pf_addr *naddr, struct pf_addr *init_addr, struct pf_src_node **sn)
2995 	if (*sn == NULL && r->rpool.opts & PF_POOL_STICKYADDR &&
3005 		*sn = RB_FIND(pf_src_tree, &tree_src_tracking, &k);
3006 		if (*sn != NULL && !PF_AZERO(&(*sn)->raddr, af)) {
3007 			PF_ACPY(naddr, &(*sn)->raddr, af);
3154 	if (*sn != NULL)
3155 		PF_ACPY(&(*sn)->raddr, naddr, af);
3171     union pf_state_xport *nxport, struct pf_src_node **sn)
3183 	if (pf_map_addr(af, r, saddr, naddr, &init_addr, sn))
3321 			if (pf_map_addr(af, r, saddr, naddr, &init_addr, sn))
3434     int direction, struct pfi_kif *kif, struct pf_src_node **sn,
3466 			    dxport, naddr, nxport, sn)) {
3597 				    naddr, NULL, sn))
4720 		struct pf_src_node *sn = NULL;
4771 		    pf_insert_src_node(&sn, r, saddr, af) != 0) {
4788 			if (sn != NULL && sn->states == 0 && sn->expire == 0) {
4789 				RB_REMOVE(pf_src_tree, &tree_src_tracking, sn);
4792 				pool_put(&pf_src_tree_pl, sn);
4794 			if (nsn != sn && nsn != NULL && nsn->states == 0 &&
4885 		if (sn != NULL) {
4886 			s->src_node = sn;
7622 	struct pf_src_node	*sn = NULL;
7682 			    &naddr, NULL, &sn);
7837 	struct pf_src_node	*sn = NULL;
7891 		    &naddr, NULL, &sn);