Date: Fri, 1 Jul 2011 07:58:30 +0200 From: Luigi Rizzo <rizzo@iet.unipi.it> To: Julian Elischer <julian@freebsd.org> Cc: svn-src-head@freebsd.org, "Andrey V. Elsukov" <ae@freebsd.org>, svn-src-all@freebsd.org, src-committers@freebsd.org Subject: Re: svn commit: r223666 - in head: sbin/ipfw sys/netinet sys/netinet/ipfw Message-ID: <20110701055830.GA72689@onelab2.iet.unipi.it> In-Reply-To: <4E0D57C4.4070502@freebsd.org> References: <201106291006.p5TA6w0m089164@svn.freebsd.org> <4E0D57C4.4070502@freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jun 30, 2011 at 10:14:44PM -0700, Julian Elischer wrote: > On 6/29/11 3:06 AM, Andrey V. Elsukov wrote: > >Author: ae > >Date: Wed Jun 29 10:06:58 2011 > >New Revision: 223666 > >URL: http://svn.freebsd.org/changeset/base/223666 > > > >Log: > > Add new rule actions "call" and "return" to ipfw. They make > > possible to organize subroutines with rules. > > > > The "call" action saves the current rule number in the internal > > stack and rules processing continues from the first rule with > > specified number (similar to skipto action). If later a rule with > > "return" action is encountered, the processing returns to the first > > rule with number of "call" rule saved in the stack plus one or higher. > > > > Submitted by: Vadim Goncharov > > Discussed by: ipfw@, luigi@ > > > >Modified: > what happens if the return target is removed in the meanwhile? i suppose it has the same vulnerability of skipto: if the target goes away you continue from the next rule.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110701055830.GA72689>