sys/net/pf.c

786 					/* remove late or sks can go away */
938     struct pf_state_key **sks, int rtableid)
995 		*sks = sk2;
997 		*sks = sk1;
1003 		pf_print_state_parts(NULL, *skw, *sks);
1028 	struct pf_state_key *sks = *sksp;
1029 	int same = (skw == sks);
1038 		pf_state_key_unref(sks);
1045 		pf_state_key_unref(sks);
1046 		st->key[PF_SK_STACK] = sks = pf_state_key_ref(skw);
1047 	} else if (pf_state_key_attach(sks, st, PF_SK_STACK) == NULL) {
1079 	*sksp = sks;
1385 	struct pf_state_key *skw = NULL, *sks = NULL;
1447 		if ((sks = pf_alloc_state_key(pool_flags)) == NULL)
1450 		sks = pf_state_key_ref(skw);
1469 	if (sks != skw) {
1470 		sks->addr[0] = sp->key[PF_SK_STACK].addr[0];
1471 		sks->addr[1] = sp->key[PF_SK_STACK].addr[1];
1472 		sks->port[0] = sp->key[PF_SK_STACK].port[0];
1473 		sks->port[1] = sp->key[PF_SK_STACK].port[1];
1474 		sks->rdomain = ntohs(sp->key[PF_SK_STACK].rdomain);
1475 		if (!(sks->af = sp->key[PF_SK_STACK].af))
1476 			sks->af = sp->af;
1477 		if (sks->af != skw->af) {
1480 				sks->proto = IPPROTO_ICMPV6;
1483 				sks->proto = IPPROTO_ICMP;
1486 				sks->proto = sp->proto;
1489 			sks->proto = sp->proto;
1491 		if (((sks->af != AF_INET) && (sks->af != AF_INET6)) ||
1497 		sks->hash = pf_pkt_hash(sks->af, sks->proto,
1498 		    &sks->addr[0], &sks->addr[1], sks->port[0], sks->port[1]);
1500 	} else if ((sks->af != AF_INET) && (sks->af != AF_INET6)) {
1551 	pfsync_init_state(st, skw, sks, flags);
1554 	if (pf_state_insert(kif, &skw, &sks, st) != 0) {
1566 	if (sks != NULL)
1567 		pf_state_key_unref(sks);
2096 	struct pf_state_key *skw, *sks;
2101 	sks = sksp ? sksp : (st ? st->key[PF_SK_STACK] : NULL);
2102 	proto = skw ? skw->proto : (sks ? sks->proto : 0);
2142 	if (sks) {
2143 		addlog(" stack: (%d) ", sks->rdomain);
2144 		if (sks != skw) {
2145 			pf_print_host(&sks->addr[0], sks->port[0], sks->af);
2147 			pf_print_host(&sks->addr[1], sks->port[1], sks->af);
4369 	struct pf_state_key	*skw = NULL, *sks = NULL;
4528 		action = pf_create_state(pd, r, a, ctx.nr, &skw, &sks,
4533 		if (sks != skw) {
4537 				sk = sks;
4549 		if (rewrite && skw->af != sks->af)
4594     struct pf_rule *nr, struct pf_state_key **skw, struct pf_state_key **sks,
4719 	if (pf_state_key_setup(pd, skw, sks, act->rtableid)) {
4744 	pfsync_init_state(st, *skw, *sks, 0);
4747 	if (pf_state_insert(BOUND_IFACE(r, pd->kif), skw, sks, st)) {
4748 		*sks = *skw = NULL;