sbin/ipfw/ipfw2.c

87  * only. At the beginning, cblen is less than actual buffer size by
93 #define	CHECK_CMDLEN	CHECK_LENGTH(cblen, F_LEN((ipfw_insn *)cmd))
998 fill_newports(ipfw_insn_u16 *cmd, char *av, int proto, int cblen)
1009 		CHECK_LENGTH(cblen, i + 2);
1047 fill_dscp(ipfw_insn *cmd, char *av, int cblen)
3110 fill_ip(ipfw_insn_ip *cmd, char *av, int cblen, struct tidx *tstate)
3140 	CHECK_LENGTH(cblen, (int)F_INSN_SIZE(ipfw_insn) + 2 + len);
3408 fill_iface(ipfw_insn_if *cmd, char *arg, int cblen, struct tidx *tstate)
3507 fill_comment(ipfw_insn *cmd, char **av, int cblen)
3552 add_mac(ipfw_insn *cmd, char *av[], int cblen)
3571 add_mactype(ipfw_insn *cmd, char *av, int cblen)
3577 		    cblen);
3646 add_srcip(ipfw_insn *cmd, char *av, int cblen, struct tidx *tstate)
3648 	fill_ip((ipfw_insn_ip *)cmd, av, cblen, tstate);
3663 add_dstip(ipfw_insn *cmd, char *av, int cblen, struct tidx *tstate)
3665 	fill_ip((ipfw_insn_ip *)cmd, av, cblen, tstate);
3700 add_ports(ipfw_insn *cmd, char *av, u_char proto, int opcode, int cblen)
3706 	if (fill_newports((ipfw_insn_u16 *)cmd, av, proto, cblen)) {
3715 add_src(ipfw_insn *cmd, char *av, u_char proto, int cblen, struct tidx *tstate)
3734 		ret = add_srcip6(cmd, av, cblen, tstate);
3738 		ret = add_srcip(cmd, av, cblen, tstate);
3746 add_dst(ipfw_insn *cmd, char *av, u_char proto, int cblen, struct tidx *tstate)
3765 		ret = add_dstip6(cmd, av, cblen, tstate);
3769 		ret = add_dstip(cmd, av, cblen, tstate);
3798 	int rblen, ablen, cblen;
3834 	cblen = sizeof(cmdbuf) / sizeof(cmdbuf[0]);
3835 	cblen -= F_INSN_SIZE(ipfw_insn_u32) + 1;
4320 		cmd = next_cmd(cmd, &cblen);
4328 			fill_comment(cmd, av, cblen);
4329 			cmd = next_cmd(cmd, &cblen);
4414 			cmd = next_cmd(cmd, &cblen);
4439 	if (add_src(cmd, *av, proto, cblen, tstate)) {
4443 			cmd = next_cmd(cmd, &cblen);
4455 		    add_ports(cmd, *av, proto, O_IP_SRCPORT, cblen)) {
4458 				cmd = next_cmd(cmd, &cblen);
4475 	if (add_dst(cmd, *av, proto, cblen, tstate)) {
4479 			cmd = next_cmd(cmd, &cblen);
4491 		    add_ports(cmd, *av, proto, O_IP_DSTPORT, cblen)) {
4494 				cmd = next_cmd(cmd, &cblen);
4592 			fill_iface((ipfw_insn_if *)cmd, av[0], cblen, tstate);
4612 			fill_icmp6types((ipfw_insn_icmp6 *)cmd, *av, cblen);
4619 			    if (!add_ports(cmd, *av, 0, O_IPTTL, cblen))
4629 			    if (!add_ports(cmd, *av, 0, O_IPID, cblen))
4639 			    if (!add_ports(cmd, *av, 0, O_IPLEN, cblen))
4661 			fill_dscp(cmd, *av, cblen);
4755 			    if (!add_ports(cmd, *av, 0, O_TCPDATALEN, cblen))
4784 				    cblen) == NULL)
4883 			if (add_srcip(cmd, *av, cblen, tstate)) {
4890 			if (add_dstip(cmd, *av, cblen, tstate)) {
4897 			if (add_srcip6(cmd, *av, cblen, tstate)) {
4904 			if (add_dstip6(cmd, *av, cblen, tstate)) {
4912 			    add_ports(cmd, *av, proto, O_IP_SRCPORT, cblen)) {
4921 			    add_ports(cmd, *av, proto, O_IP_DSTPORT, cblen)) {
4929 			if (add_mac(cmd, av, cblen))
4935 			if (!add_mactype(cmd, *av, cblen))
4974 			fill_flow6( (ipfw_insn_u32 *) cmd, *av, cblen);
4979 			fill_comment(cmd, av, cblen);
4985 				if (!add_ports(cmd, *av, 0, O_TAGGED, cblen))
5055 			cmd = next_cmd(cmd, &cblen);