svn commit: r223666 - in head: sbin/ipfw sys/netinet sys/netinet/ipfw

[Luigi Rizzo]

On Thu, Jun 30, 2011 at 10:14:44PM -0700, Julian Elischer wrote:
> On 6/29/11 3:06 AM, Andrey V. Elsukov wrote:
> >Author: ae
> >Date: Wed Jun 29 10:06:58 2011
> >New Revision: 223666
> >URL: http://svn.freebsd.org/changeset/base/223666
> >
> >Log:
> >   Add new rule actions "call" and "return" to ipfw. They make
> >   possible to organize subroutines with rules.
> >
> >   The "call" action saves the current rule number in the internal
> >   stack and rules processing continues from the first rule with
> >   specified number (similar to skipto action). If later a rule with
> >   "return" action is encountered, the processing returns to the first
> >   rule with number of "call" rule saved in the stack plus one or higher.
> >
> >   Submitted by:	Vadim Goncharov
> >   Discussed by:	ipfw@, luigi@
> >
> >Modified:
> what happens if the return target is removed in the meanwhile?

i suppose it has the same vulnerability of skipto: if the target
goes away you continue from the next rule.