netpfil/pf/pf_ioctl.c

135 static MALLOC_DEFINE(M_PFRULE, "pf_rule", "pf(4) rules");
304 		    ruleset->rules[rs_num].active.ticket)
307 			rule = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
310 			rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
313 		    ruleset->rules[rs_num].inactive.ticket)
316 			rule = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
319 			rule = TAILQ_FIRST(ruleset->rules[rs_num].inactive.ptr);
741 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
742 		pf_unlink_rule(rs->rules[rs_num].inactive.ptr, rule);
743 		rs->rules[rs_num].inactive.rcount--;
745 	*ticket = ++rs->rules[rs_num].inactive.ticket;
746 	rs->rules[rs_num].inactive.open = 1;
761 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
762 	    rs->rules[rs_num].inactive.ticket != ticket)
764 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
765 		pf_unlink_rule(rs->rules[rs_num].inactive.ptr, rule);
766 		rs->rules[rs_num].inactive.rcount--;
768 	rs->rules[rs_num].inactive.open = 0;
866 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
867 	    ticket != rs->rules[rs_num].inactive.ticket)
877 	/* Swap rules, keep the old. */
878 	old_rules = rs->rules[rs_num].active.ptr;
879 	old_rcount = rs->rules[rs_num].active.rcount;
880 	old_array = rs->rules[rs_num].active.ptr_array;
882 	rs->rules[rs_num].active.ptr =
883 	    rs->rules[rs_num].inactive.ptr;
884 	rs->rules[rs_num].active.ptr_array =
885 	    rs->rules[rs_num].inactive.ptr_array;
886 	rs->rules[rs_num].active.rcount =
887 	    rs->rules[rs_num].inactive.rcount;
888 	rs->rules[rs_num].inactive.ptr = old_rules;
889 	rs->rules[rs_num].inactive.ptr_array = old_array;
890 	rs->rules[rs_num].inactive.rcount = old_rcount;
892 	rs->rules[rs_num].active.ticket =
893 	    rs->rules[rs_num].inactive.ticket;
894 	pf_calc_skip_steps(rs->rules[rs_num].active.ptr);
900 	if (rs->rules[rs_num].inactive.ptr_array)
901 		free(rs->rules[rs_num].inactive.ptr_array, M_TEMP);
902 	rs->rules[rs_num].inactive.ptr_array = NULL;
903 	rs->rules[rs_num].inactive.rcount = 0;
904 	rs->rules[rs_num].inactive.open = 0;
924 		if (rs->rules[rs_cnt].inactive.ptr_array)
925 			free(rs->rules[rs_cnt].inactive.ptr_array, M_TEMP);
926 		rs->rules[rs_cnt].inactive.ptr_array = NULL;
928 		if (rs->rules[rs_cnt].inactive.rcount) {
929 			rs->rules[rs_cnt].inactive.ptr_array =
931 			    rs->rules[rs_cnt].inactive.rcount,
934 			if (!rs->rules[rs_cnt].inactive.ptr_array)
938 		TAILQ_FOREACH(rule, rs->rules[rs_cnt].inactive.ptr,
941 			(rs->rules[rs_cnt].inactive.ptr_array)[rule->nr] = rule;
1181 		if (pr->ticket != ruleset->rules[rs_num].inactive.ticket) {
1184 			    ruleset->rules[rs_num].inactive.ticket));
1194 		tail = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
1274 		TAILQ_INSERT_TAIL(ruleset->rules[rs_num].inactive.ptr,
1276 		ruleset->rules[rs_num].inactive.rcount++;
1312 		tail = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
1318 		pr->ticket = ruleset->rules[rs_num].active.ticket;
1343 		if (pr->ticket != ruleset->rules[rs_num].active.ticket) {
1348 		rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
1445 			pcr->ticket = ++ruleset->rules[rs_num].active.ticket;
1448 			    ruleset->rules[rs_num].active.ticket)
1540 			    ruleset->rules[rs_num].active.ptr);
1543 			    ruleset->rules[rs_num].active.ptr, pf_rulequeue);
1546 			    ruleset->rules[rs_num].active.ptr);
1559 			pf_unlink_rule(ruleset->rules[rs_num].active.ptr,
1561 			ruleset->rules[rs_num].active.rcount--;
1565 				    ruleset->rules[rs_num].active.ptr,
1572 				    ruleset->rules[rs_num].active.ptr,
1574 			ruleset->rules[rs_num].active.rcount++;
1579 		    ruleset->rules[rs_num].active.ptr, entries)
1582 		ruleset->rules[rs_num].active.ticket++;
1584 		pf_calc_skip_steps(ruleset->rules[rs_num].active.ptr);
1977 		    ruleset->rules[PF_RULESET_FILTER].active.ptr, entries) {
3070 				    !rs->rules[ioe->rs_num].inactive.open ||
3071 				    rs->rules[ioe->rs_num].inactive.ticket !=