bsd/net/pf_ioctl.c

695 	int			 rs_num;
700 	rs_num = pf_get_ruleset_number(rule_action);
701 	if (rs_num >= PF_RULESET_MAX)
705 		    ruleset->rules[rs_num].active.ticket)
708 			rule = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
711 			rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
714 		    ruleset->rules[rs_num].inactive.ticket)
717 			rule = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
720 			rule = TAILQ_FIRST(ruleset->rules[rs_num].inactive.ptr);
1160 pf_begin_rules(u_int32_t *ticket, int rs_num, const char *anchor)
1165 	if (rs_num < 0 || rs_num >= PF_RULESET_MAX)
1170 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
1171 		pf_rm_rule(rs->rules[rs_num].inactive.ptr, rule);
1172 		rs->rules[rs_num].inactive.rcount--;
1174 	*ticket = ++rs->rules[rs_num].inactive.ticket;
1175 	rs->rules[rs_num].inactive.open = 1;
1180 pf_rollback_rules(u_int32_t ticket, int rs_num, char *anchor)
1185 	if (rs_num < 0 || rs_num >= PF_RULESET_MAX)
1188 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
1189 	    rs->rules[rs_num].inactive.ticket != ticket)
1191 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
1192 		pf_rm_rule(rs->rules[rs_num].inactive.ptr, rule);
1193 		rs->rules[rs_num].inactive.rcount--;
1195 	rs->rules[rs_num].inactive.open = 0;
1292 pf_commit_rules(u_int32_t ticket, int rs_num, char *anchor)
1302 	if (rs_num < 0 || rs_num >= PF_RULESET_MAX)
1305 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
1306 	    ticket != rs->rules[rs_num].inactive.ticket)
1317 	old_rules = rs->rules[rs_num].active.ptr;
1318 	old_rcount = rs->rules[rs_num].active.rcount;
1319 	old_array = rs->rules[rs_num].active.ptr_array;
1321 	rs->rules[rs_num].active.ptr =
1322 	    rs->rules[rs_num].inactive.ptr;
1323 	rs->rules[rs_num].active.ptr_array =
1324 	    rs->rules[rs_num].inactive.ptr_array;
1325 	rs->rules[rs_num].active.rcount =
1326 	    rs->rules[rs_num].inactive.rcount;
1327 	rs->rules[rs_num].inactive.ptr = old_rules;
1328 	rs->rules[rs_num].inactive.ptr_array = old_array;
1329 	rs->rules[rs_num].inactive.rcount = old_rcount;
1331 	rs->rules[rs_num].active.ticket =
1332 	    rs->rules[rs_num].inactive.ticket;
1333 	pf_calc_skip_steps(rs->rules[rs_num].active.ptr);
1339 	if (rs->rules[rs_num].inactive.ptr_array)
1340 		_FREE(rs->rules[rs_num].inactive.ptr_array, M_TEMP);
1341 	rs->rules[rs_num].inactive.ptr_array = NULL;
1342 	rs->rules[rs_num].inactive.rcount = 0;
1343 	rs->rules[rs_num].inactive.open = 0;
2785 pf_delete_rule_from_ruleset(struct pf_ruleset *ruleset, int rs_num,
2793 	pf_rm_rule(ruleset->rules[rs_num].active.ptr, rule);
2794 	if (ruleset->rules[rs_num].active.rcount-- == 0)
2796 	r = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
2818 	int			 rs_num;
2827 	rs_num = pf_get_ruleset_number(pr->rule.action);
2828 	if (rs_num >= PF_RULESET_MAX) {
2833 		rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
2845 		    ((ruleset->rules[rs_num].active.rcount - 1) == 0)) {
2856 			rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
2867 			    rs_num, delete_rule);
2868 			delete_ruleset->rules[rs_num].active.ticket =
2869 			    ++delete_ruleset->rules[rs_num].inactive.ticket;
2875 			pf_delete_rule_from_ruleset(ruleset, rs_num,
2877 			pf_ruleset_cleanup(ruleset, rs_num);
3062 		int			rs_num;
3071 		rs_num = pf_get_ruleset_number(pr->rule.action);
3072 		if (rs_num >= PF_RULESET_MAX) {
3080 		if (pr->ticket != ruleset->rules[rs_num].inactive.ticket) {
3108 		tail = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
3118 		TAILQ_INSERT_TAIL(ruleset->rules[rs_num].inactive.ptr,
3120 		ruleset->rules[rs_num].inactive.rcount++;
3129 		int			 rs_num;
3138 		rs_num = pf_get_ruleset_number(pr->rule.action);
3139 		if (rs_num >= PF_RULESET_MAX) {
3143 		tail = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
3149 		pr->ticket = ruleset->rules[rs_num].active.ticket;
3156 		int			 rs_num, i;
3165 		rs_num = pf_get_ruleset_number(pr->rule.action);
3166 		if (rs_num >= PF_RULESET_MAX) {
3170 		if (pr->ticket != ruleset->rules[rs_num].active.ticket) {
3174 		rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
3213 		int			 rs_num;
3234 		rs_num = pf_get_ruleset_number(pcr->rule.action);
3235 		if (rs_num >= PF_RULESET_MAX) {
3241 			pcr->ticket = ++ruleset->rules[rs_num].active.ticket;
3245 			    ruleset->rules[rs_num].active.ticket) {
3366 			    ruleset->rules[rs_num].active.ptr);
3369 			    ruleset->rules[rs_num].active.ptr, pf_rulequeue);
3372 			    ruleset->rules[rs_num].active.ptr);
3384 			pf_rm_rule(ruleset->rules[rs_num].active.ptr, oldrule);
3385 			ruleset->rules[rs_num].active.rcount--;
3389 				    ruleset->rules[rs_num].active.ptr,
3396 				    ruleset->rules[rs_num].active.ptr,
3398 			ruleset->rules[rs_num].active.rcount++;
3403 		    ruleset->rules[rs_num].active.ptr, entries)
3406 		ruleset->rules[rs_num].active.ticket++;
3408 		pf_calc_skip_steps(ruleset->rules[rs_num].active.ptr);
3417 		int			rs_num;
3428 		rs_num = pf_get_ruleset_number(pr->rule.action);
3429 		if (rs_num >= PF_RULESET_MAX) {
3440 			r = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
3478 		r = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
3483 			    TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
3504 			TAILQ_INSERT_TAIL(ruleset->rules[rs_num].active.ptr,
3506 		ruleset->rules[rs_num].active.rcount++;
3512 		pf_ruleset_cleanup(ruleset, rs_num);
3513 		rule->ticket = ruleset->rules[rs_num].active.ticket;
4277 			switch (ioe->rs_num) {
4309 				    ioe->rs_num, ioe->anchor))) {
4347 			switch (ioe->rs_num) {
4379 				    ioe->rs_num, ioe->anchor))) {
4414 			switch (ioe->rs_num) {
4446 				if (ioe->rs_num < 0 || ioe->rs_num >=
4455 				    !rs->rules[ioe->rs_num].inactive.open ||
4456 				    rs->rules[ioe->rs_num].inactive.ticket !=
4476 			switch (ioe->rs_num) {
4500 				    ioe->rs_num, ioe->anchor))) {