args.m = *m0;
args.inp = inp;
ipfw = ipfw_chk(&args);
- *m0 = args.m;
+ *m0 = args.m; /* args.m can be modified by ipfw_chk */
tee = 0;
KASSERT(*m0 != NULL || ipfw == IP_FW_DENY, ("%s: m0 is NULL",
goto drop;
break; /* not reached */
+ /* here packets come after the ipfw classification */
case IP_FW_DUMMYNET:
if (ip_dn_io_ptr == NULL)
goto drop;
args.oif = ifp;
args.inp = inp;
ipfw = ipfw_chk(&args);
- *m0 = args.m;
+ *m0 = args.m; /* args.m can be modified by ipfw_chk */
tee = 0;
KASSERT(*m0 != NULL || ipfw == IP_FW_DENY, ("%s: m0 is NULL",