bsd/net/pf_ioctl.c

698 	int			 rs_num;
703 	rs_num = pf_get_ruleset_number(rule_action);
704 	if (rs_num >= PF_RULESET_MAX)
708 		    ruleset->rules[rs_num].active.ticket)
711 			rule = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
714 			rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
717 		    ruleset->rules[rs_num].inactive.ticket)
720 			rule = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
723 			rule = TAILQ_FIRST(ruleset->rules[rs_num].inactive.ptr);
1163 pf_begin_rules(u_int32_t *ticket, int rs_num, const char *anchor)
1168 	if (rs_num < 0 || rs_num >= PF_RULESET_MAX)
1173 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
1174 		pf_rm_rule(rs->rules[rs_num].inactive.ptr, rule);
1175 		rs->rules[rs_num].inactive.rcount--;
1177 	*ticket = ++rs->rules[rs_num].inactive.ticket;
1178 	rs->rules[rs_num].inactive.open = 1;
1183 pf_rollback_rules(u_int32_t ticket, int rs_num, char *anchor)
1188 	if (rs_num < 0 || rs_num >= PF_RULESET_MAX)
1191 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
1192 	    rs->rules[rs_num].inactive.ticket != ticket)
1194 	while ((rule = TAILQ_FIRST(rs->rules[rs_num].inactive.ptr)) != NULL) {
1195 		pf_rm_rule(rs->rules[rs_num].inactive.ptr, rule);
1196 		rs->rules[rs_num].inactive.rcount--;
1198 	rs->rules[rs_num].inactive.open = 0;
1295 pf_commit_rules(u_int32_t ticket, int rs_num, char *anchor)
1305 	if (rs_num < 0 || rs_num >= PF_RULESET_MAX)
1308 	if (rs == NULL || !rs->rules[rs_num].inactive.open ||
1309 	    ticket != rs->rules[rs_num].inactive.ticket)
1320 	old_rules = rs->rules[rs_num].active.ptr;
1321 	old_rcount = rs->rules[rs_num].active.rcount;
1322 	old_array = rs->rules[rs_num].active.ptr_array;
1325 		r = TAILQ_FIRST(rs->rules[rs_num].active.ptr);
1334 	rs->rules[rs_num].active.ptr =
1335 	    rs->rules[rs_num].inactive.ptr;
1336 	rs->rules[rs_num].active.ptr_array =
1337 	    rs->rules[rs_num].inactive.ptr_array;
1338 	rs->rules[rs_num].active.rcount =
1339 	    rs->rules[rs_num].inactive.rcount;
1340 	rs->rules[rs_num].inactive.ptr = old_rules;
1341 	rs->rules[rs_num].inactive.ptr_array = old_array;
1342 	rs->rules[rs_num].inactive.rcount = old_rcount;
1344 	rs->rules[rs_num].active.ticket =
1345 	    rs->rules[rs_num].inactive.ticket;
1346 	pf_calc_skip_steps(rs->rules[rs_num].active.ptr);
1352 	if (rs->rules[rs_num].inactive.ptr_array)
1353 		_FREE(rs->rules[rs_num].inactive.ptr_array, M_TEMP);
1354 	rs->rules[rs_num].inactive.ptr_array = NULL;
1355 	rs->rules[rs_num].inactive.rcount = 0;
1356 	rs->rules[rs_num].inactive.open = 0;
2798 pf_delete_rule_from_ruleset(struct pf_ruleset *ruleset, int rs_num,
2806 	pf_rm_rule(ruleset->rules[rs_num].active.ptr, rule);
2807 	if (ruleset->rules[rs_num].active.rcount-- == 0)
2809 	r = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
3117 		int			rs_num;
3126 		rs_num = pf_get_ruleset_number(pr->rule.action);
3127 		if (rs_num >= PF_RULESET_MAX) {
3135 		if (pr->ticket != ruleset->rules[rs_num].inactive.ticket) {
3163 		tail = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
3173 		TAILQ_INSERT_TAIL(ruleset->rules[rs_num].inactive.ptr,
3175 		ruleset->rules[rs_num].inactive.rcount++;
3184 		int			 rs_num;
3193 		rs_num = pf_get_ruleset_number(pr->rule.action);
3194 		if (rs_num >= PF_RULESET_MAX) {
3198 		tail = TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
3204 		pr->ticket = ruleset->rules[rs_num].active.ticket;
3211 		int			 rs_num, i;
3220 		rs_num = pf_get_ruleset_number(pr->rule.action);
3221 		if (rs_num >= PF_RULESET_MAX) {
3225 		if (pr->ticket != ruleset->rules[rs_num].active.ticket) {
3229 		rule = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
3268 		int			 rs_num;
3289 		rs_num = pf_get_ruleset_number(pcr->rule.action);
3290 		if (rs_num >= PF_RULESET_MAX) {
3296 			pcr->ticket = ++ruleset->rules[rs_num].active.ticket;
3300 			    ruleset->rules[rs_num].active.ticket) {
3423 			    ruleset->rules[rs_num].active.ptr);
3426 			    ruleset->rules[rs_num].active.ptr, pf_rulequeue);
3429 			    ruleset->rules[rs_num].active.ptr);
3441 			pf_rm_rule(ruleset->rules[rs_num].active.ptr, oldrule);
3442 			ruleset->rules[rs_num].active.rcount--;
3446 				    ruleset->rules[rs_num].active.ptr,
3453 				    ruleset->rules[rs_num].active.ptr,
3455 			ruleset->rules[rs_num].active.rcount++;
3460 		    ruleset->rules[rs_num].active.ptr, entries)
3463 		ruleset->rules[rs_num].active.ticket++;
3465 		pf_calc_skip_steps(ruleset->rules[rs_num].active.ptr);
3474 		int			rs_num;
3485 		rs_num = pf_get_ruleset_number(pr->rule.action);
3486 		if (rs_num >= PF_RULESET_MAX) {
3497 			r = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
3537 		r = TAILQ_FIRST(ruleset->rules[rs_num].active.ptr);
3542 			    TAILQ_LAST(ruleset->rules[rs_num].active.ptr,
3563 			TAILQ_INSERT_TAIL(ruleset->rules[rs_num].active.ptr,
3565 		ruleset->rules[rs_num].active.rcount++;
3571 		pf_ruleset_cleanup(ruleset, rs_num);
4342 			switch (ioe->rs_num) {
4374 				    ioe->rs_num, ioe->anchor))) {
4412 			switch (ioe->rs_num) {
4444 				    ioe->rs_num, ioe->anchor))) {
4479 			switch (ioe->rs_num) {
4511 				if (ioe->rs_num < 0 || ioe->rs_num >=
4520 				    !rs->rules[ioe->rs_num].inactive.open ||
4521 				    rs->rules[ioe->rs_num].inactive.ticket !=
4541 			switch (ioe->rs_num) {
4565 				    ioe->rs_num, ioe->anchor))) {