Re: pf statekey inp chaining

2015-12-03 Thread Alexandr Nedvedicky
Hello, OK sasha On Thu, Dec 03, 2015 at 12:29:15PM +0100, Alexander Bluhm wrote: > On Wed, Dec 02, 2015 at 07:45:09PM +0100, Alexander Bluhm wrote: > > Here is a new version of the diff. This is new: > > Now with feedback from sashan@ > > - merge > - no SS_ISCONNECTED check in tcp as it was

pf statekey inp chaining

2015-12-02 Thread Alexander Bluhm
Hi, To avoid that the stack manipules the pf statekeys directly, introduce some pf_inp_...() functions as an interface. Locks can be added to them later. I have removed the first chaining at the beginning of tcp_input() and udp_input() directly after in_pcbhashlookup() as it is not necessary.

Re: pf statekey inp chaining

2015-12-02 Thread Alexander Bluhm
On Wed, Dec 02, 2015 at 04:48:51PM +0100, Alexander Bluhm wrote: > To avoid that the stack manipules the pf statekeys directly, introduce > some pf_inp_...() functions as an interface. Locks can be added > to them later. Here is a new version of the diff. This is new: - rename "chain" to