netpfil/pf/pf.c

1026 					 * New state matches an old >FIN_WAIT_2
1333 				 * pf_unlink_state() in an other thread, or
1637 		 * an other thread.
1745 	 * an already unlinked rule.
2074         u_int16_t *pc, struct pf_addr *an, u_int16_t pn, u_int8_t u,
2081 	PF_ACPY(a, an, af);
2092 		    ao.addr16[0], an->addr16[0], 0),
2093 		    ao.addr16[1], an->addr16[1], 0);
2097 		    ao.addr16[0], an->addr16[0], u),
2098 		    ao.addr16[1], an->addr16[1], u);
2108 		    ao.addr16[0], an->addr16[0], u),
2109 		    ao.addr16[1], an->addr16[1], u),
2110 		    ao.addr16[2], an->addr16[2], u),
2111 		    ao.addr16[3], an->addr16[3], u),
2112 		    ao.addr16[4], an->addr16[4], u),
2113 		    ao.addr16[5], an->addr16[5], u),
2114 		    ao.addr16[6], an->addr16[6], u),
2115 		    ao.addr16[7], an->addr16[7], u);
2132 pf_change_a(void *a, u_int16_t *c, u_int32_t an, u_int8_t u)
2137 	memcpy(a, &an, sizeof(u_int32_t));
2138 	*c = pf_cksum_fixup(pf_cksum_fixup(*c, ao / 65536, an / 65536, u),
2139 	    ao % 65536, an % 65536, u);
2143 pf_change_proto_a(struct mbuf *m, void *a, u_int16_t *c, u_int32_t an, u_int8_t udp)
2148 	memcpy(a, &an, sizeof(u_int32_t));
2151 	    pf_proto_cksum_fixup(m, *c, ao / 65536, an / 65536, udp),
2152 	    ao % 65536, an % 65536, udp);
2157 pf_change_a6(struct pf_addr *a, u_int16_t *c, struct pf_addr *an, u_int8_t u)
2162 	PF_ACPY(a, an, AF_INET6);
2167 	    ao.addr16[0], an->addr16[0], u),
2168 	    ao.addr16[1], an->addr16[1], u),
2169 	    ao.addr16[2], an->addr16[2], u),
2170 	    ao.addr16[3], an->addr16[3], u),
2171 	    ao.addr16[4], an->addr16[4], u),
2172 	    ao.addr16[5], an->addr16[5], u),
2173 	    ao.addr16[6], an->addr16[6], u),
2174 	    ao.addr16[7], an->addr16[7], u);
3988 		 * Many stacks (ours included) will set the ACK number in an
4021 #define	MAXACKWINDOW (0xffff + 1500)	/* 1500 is an arbitrary fudge factor */
4033 	    /* Require an exact/+1 sequence match on resets when possible */
4105 		 *  2) When PF catches an already established stream (the
4152 		 * SYN and not an already established connection.
4555 		 * Search for an ICMP state.
4748 			 * th_seq, an ackskew test is not possible.
5622 	 * send back an icmp6 error.