#define MATCH_NONE 2
#define MATCH_UNKNOWN 3
int i, dir = MATCH_NONE;
- ipfw_dyn_rule *prev, *q=NULL;
+ ipfw_dyn_rule *q=NULL;
if (ipfw_dyn_v == NULL)
goto done; /* not found */
i = hash_packet(pkt);
- for (prev = NULL, q = ipfw_dyn_v[i]; q != NULL;) {
+ for (q = ipfw_dyn_v[i]; q != NULL;) {
if (q->dyn_type == O_LIMIT_PARENT)
goto next;
}
}
next:
- prev = q;
q = q->next;
}
if (q == NULL)
int match = 0;
int state_icmp = 0;
u_int16_t sport = 0, dport = 0;
- u_int16_t nport = 0, bport = 0;
u_int16_t bproto_sum = 0, bip_sum = 0;
u_int8_t icmptype = 0, icmpcode = 0;
r = TAILQ_FIRST(pf_main_ruleset.rules[PF_RULESET_FILTER].active.ptr);
- bport = nport = sport;
/* check packet for BINAT/NAT/RDR */
if ((nr = pf_get_translation(pd, m, off, direction, kif, &nsn,
&skw, &sks, &sk, &nk, saddr, daddr, sport, dport)) != NULL) {
u_int16_t fragoff = (h->ip_off & IP_OFFMASK) << 3;
u_int16_t max;
int ip_len;
- int ip_off;
int tag = -1;
r = TAILQ_FIRST(pf_main_ruleset.rules[PF_RULESET_SCRUB].active.ptr);
}
ip_len = h->ip_len - hlen;
- ip_off = (h->ip_off & IP_OFFMASK) << 3;
/* All fragments are 8 byte aligned */
if (mff && (ip_len & 0x7)) {