netpfil/pf/pf_ioctl.c

137 static MALLOC_DEFINE(M_PFRULE, "pf_rule", "pf(4) rules");
311 		    ruleset->rules[rs_num].active.ticket)
314 			rule = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
317 			rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
320 		    ruleset->rules[rs_num].inactive.ticket)
323 			rule = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
326 			rule = TAILQ_FIRST(ruleset->rules[rs_num].inactive.ptr);
748 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
749 		pf_unlink_rule(rs->rules[rs_num].inactive.ptr, rule);
750 		rs->rules[rs_num].inactive.rcount--;
752 	*ticket = ++rs->rules[rs_num].inactive.ticket;
753 	rs->rules[rs_num].inactive.open = 1;
768 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
769 	    rs->rules[rs_num].inactive.ticket != ticket)
771 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
772 		pf_unlink_rule(rs->rules[rs_num].inactive.ptr, rule);
773 		rs->rules[rs_num].inactive.rcount--;
775 	rs->rules[rs_num].inactive.open = 0;
873 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
874 	    ticket != rs->rules[rs_num].inactive.ticket)
884 	/* Swap rules, keep the old. */
885 	old_rules = rs->rules[rs_num].active.ptr;
886 	old_rcount = rs->rules[rs_num].active.rcount;
887 	old_array = rs->rules[rs_num].active.ptr_array;
889 	rs->rules[rs_num].active.ptr =
890 	    rs->rules[rs_num].inactive.ptr;
891 	rs->rules[rs_num].active.ptr_array =
892 	    rs->rules[rs_num].inactive.ptr_array;
893 	rs->rules[rs_num].active.rcount =
894 	    rs->rules[rs_num].inactive.rcount;
895 	rs->rules[rs_num].inactive.ptr = old_rules;
896 	rs->rules[rs_num].inactive.ptr_array = old_array;
897 	rs->rules[rs_num].inactive.rcount = old_rcount;
899 	rs->rules[rs_num].active.ticket =
900 	    rs->rules[rs_num].inactive.ticket;
901 	pf_calc_skip_steps(rs->rules[rs_num].active.ptr);
907 	if (rs->rules[rs_num].inactive.ptr_array)
908 		free(rs->rules[rs_num].inactive.ptr_array, M_TEMP);
909 	rs->rules[rs_num].inactive.ptr_array = NULL;
910 	rs->rules[rs_num].inactive.rcount = 0;
911 	rs->rules[rs_num].inactive.open = 0;
931 		if (rs->rules[rs_cnt].inactive.ptr_array)
932 			free(rs->rules[rs_cnt].inactive.ptr_array, M_TEMP);
933 		rs->rules[rs_cnt].inactive.ptr_array = NULL;
935 		if (rs->rules[rs_cnt].inactive.rcount) {
936 			rs->rules[rs_cnt].inactive.ptr_array =
938 			    rs->rules[rs_cnt].inactive.rcount,
941 			if (!rs->rules[rs_cnt].inactive.ptr_array)
945 		TAILQ_FOREACH(rule, rs->rules[rs_cnt].inactive.ptr,
948 			(rs->rules[rs_cnt].inactive.ptr_array)[rule->nr] = rule;
1194 		if (pr->ticket != ruleset->rules[rs_num].inactive.ticket) {
1197 			    ruleset->rules[rs_num].inactive.ticket));
1207 		tail = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
1292 		TAILQ_INSERT_TAIL(ruleset->rules[rs_num].inactive.ptr,
1294 		ruleset->rules[rs_num].inactive.rcount++;
1330 		tail = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
1336 		pr->ticket = ruleset->rules[rs_num].active.ticket;
1361 		if (pr->ticket != ruleset->rules[rs_num].active.ticket) {
1366 		rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
1463 			pcr->ticket = ++ruleset->rules[rs_num].active.ticket;
1466 			    ruleset->rules[rs_num].active.ticket)
1559 			    ruleset->rules[rs_num].active.ptr);
1562 			    ruleset->rules[rs_num].active.ptr, pf_rulequeue);
1565 			    ruleset->rules[rs_num].active.ptr);
1578 			pf_unlink_rule(ruleset->rules[rs_num].active.ptr,
1580 			ruleset->rules[rs_num].active.rcount--;
1584 				    ruleset->rules[rs_num].active.ptr,
1591 				    ruleset->rules[rs_num].active.ptr,
1593 			ruleset->rules[rs_num].active.rcount++;
1598 		    ruleset->rules[rs_num].active.ptr, entries)
1601 		ruleset->rules[rs_num].active.ticket++;
1603 		pf_calc_skip_steps(ruleset->rules[rs_num].active.ptr);
1996 		    ruleset->rules[PF_RULESET_FILTER].active.ptr, entries) {
3301 				    !rs->rules[ioe->rs_num].inactive.open ||
3302 				    rs->rules[ioe->rs_num].inactive.ticket !=