bsd/net/pf_ioctl.c

576 	struct pf_anchor	*anchor;
627 	while ((anchor = RB_MIN(pf_anchor_global, &pf_anchors)) != NULL) {
629 			if (pf_begin_rules(&ticket, i, anchor->name) == 0)
630 				pf_commit_rules(ticket, i, anchor->name);
689 pf_get_pool(char *anchor, u_int32_t ticket, u_int8_t rule_action,
697 	ruleset = pf_find_ruleset(anchor);
765 			 * the anchor under our feet.
1160 pf_begin_rules(u_int32_t *ticket, int rs_num, const char *anchor)
1167 	rs = pf_find_or_create_ruleset(anchor);
1180 pf_rollback_rules(u_int32_t ticket, int rs_num, char *anchor)
1187 	rs = pf_find_ruleset(anchor);
1292 pf_commit_rules(u_int32_t ticket, int rs_num, char *anchor)
1304 	rs = pf_find_ruleset(anchor);
1365 	dst->anchor = NULL;
1387 	dst->anchor = NULL;
1429 	sp->anchor = (s->anchor.ptr == NULL) ?
1430 	    (unsigned)-1 : s->anchor.ptr->nr;
1480 	s->anchor.ptr = NULL;
2823 	if ((ruleset = pf_find_ruleset_with_owner(pr->anchor,
2843 		if (rule->anchor && (ruleset != &pf_main_ruleset) &&
2844 		    ((strcmp(ruleset->anchor->owner, "")) == 0) &&
2850 #define	parent_ruleset		ruleset->anchor->parent->ruleset
2851 			if (ruleset->anchor->parent == NULL)
2858 			    (rule->anchor != delete_ruleset->anchor))
2896 			if (rule->anchor) {
2899 					if (rule->anchor->ruleset.rules[rs].active.rcount > 0) {
2904 						/* step into anchor */
2906 						    &rule->anchor->ruleset;
2950 	/* step out of anchor */
2952 	ruleset = ruleset->anchor->parent?
2953 	    &ruleset->anchor->parent->ruleset:&pf_main_ruleset;
2956 	while (rule && (rule->anchor != rs_copy->anchor))
2959 		panic("%s: parent rule of anchor not found!", __func__);
2960 	if (rule->anchor->ruleset.rules[rs].active.rcount > 0)
3037 	    (rule->action == PF_BINAT)) && rule->anchor == NULL) ||
3064 		pr->anchor[sizeof (pr->anchor) - 1] = '\0';
3066 		ruleset = pf_find_ruleset(pr->anchor);
3131 		pr->anchor[sizeof (pr->anchor) - 1] = '\0';
3133 		ruleset = pf_find_ruleset(pr->anchor);
3158 		pr->anchor[sizeof (pr->anchor) - 1] = '\0';
3160 		ruleset = pf_find_ruleset(pr->anchor);
3227 		pcr->anchor[sizeof (pcr->anchor) - 1] = '\0';
3229 		ruleset = pf_find_ruleset(pcr->anchor);
3349 			    !newrule->anchor)) &&
3420 		pr->anchor[sizeof (pr->anchor) - 1] = '\0';
3424 		if ((ruleset = pf_find_ruleset_with_owner(pr->anchor,
3438 		/* make sure this anchor rule doesn't exist already */
3442 				if (r->anchor &&
3443 				    ((strcmp(r->anchor->name,
3495 		if (rule->anchor != NULL)
3496 			strncpy(rule->anchor->owner, rule->owner,
3523 		pr->anchor[sizeof (pr->anchor) - 1] = '\0';
3965 		pp->anchor[sizeof (pp->anchor) - 1] = '\0';
4016 		pp->anchor[sizeof (pp->anchor) - 1] = '\0';
4017 		pool = pf_get_pool(pp->anchor, pp->ticket, pp->r_action,
4031 		pp->anchor[sizeof (pp->anchor) - 1] = '\0';
4032 		pool = pf_get_pool(pp->anchor, pp->ticket, pp->r_action,
4071 		pca->anchor[sizeof (pca->anchor) - 1] = '\0';
4072 		ruleset = pf_find_ruleset(pca->anchor);
4077 		pool = pf_get_pool(pca->anchor, pca->ticket, pca->r_action,
4182 		struct pf_anchor	*anchor;
4191 		if (ruleset->anchor == NULL) {
4193 			RB_FOREACH(anchor, pf_anchor_global, &pf_anchors)
4194 				if (anchor->parent == NULL)
4197 			RB_FOREACH(anchor, pf_anchor_node,
4198 			    &ruleset->anchor->children)
4206 		struct pf_anchor	*anchor;
4215 		if (ruleset->anchor == NULL) {
4217 			RB_FOREACH(anchor, pf_anchor_global, &pf_anchors)
4218 				if (anchor->parent == NULL && nr++ == pr->nr) {
4219 					strlcpy(pr->name, anchor->name,
4224 			RB_FOREACH(anchor, pf_anchor_node,
4225 			    &ruleset->anchor->children)
4227 					strlcpy(pr->name, anchor->name,
4276 			ioe->anchor[sizeof (ioe->anchor) - 1] = '\0';
4281 					if (ioe->anchor[0]) {
4298 				strlcpy(table->pfrt_anchor, ioe->anchor,
4309 				    ioe->rs_num, ioe->anchor))) {
4346 			ioe->anchor[sizeof (ioe->anchor) - 1] = '\0';
4351 					if (ioe->anchor[0]) {
4368 				strlcpy(table->pfrt_anchor, ioe->anchor,
4379 				    ioe->rs_num, ioe->anchor))) {
4413 			ioe->anchor[sizeof (ioe->anchor) - 1] = '\0';
4418 					if (ioe->anchor[0]) {
4436 				rs = pf_find_ruleset(ioe->anchor);
4453 				rs = pf_find_ruleset(ioe->anchor);
4475 			ioe->anchor[sizeof (ioe->anchor) - 1] = '\0';
4489 				strlcpy(table->pfrt_anchor, ioe->anchor,
4500 				    ioe->rs_num, ioe->anchor))) {