HardenedBSD/sys/netpfil
Gleb Smirnoff 59cc9fde4f Rule memory garbage collecting in new pf scans only states that are on
id hash. If a state has been disconnected from id hash, its rule pointers
can no longer be dereferenced, and referenced memory can't be modified.
Thus, move rule statistics from pf_free_rule() to pf_unlink_rule() and
update them prior to releasing id hash slot lock.

Reported by:	Ian FREISLICH <ianf cloudseed.co.za>
2012-12-06 08:38:14 +00:00
..
ipfw Mechanically substitute flags from historic mbuf allocator with 2012-12-05 08:04:20 +00:00
pf Rule memory garbage collecting in new pf scans only states that are on 2012-12-06 08:38:14 +00:00