K 10
svn:author
V 6
mlaier
K 8
svn:date
V 27
2005-08-06T01:54:11.000000Z
K 7
svn:log
V 402
MFC: pf.c, 1.35 pfvar.h, 1.12

  Prevent a race condition.  As pf_send_tcp() - called for expired synproxy
  states - has to drop the lock when calling back to ip_output(), the state
  purge timeout might run and gc the state. This results in a rb-tree
  inconsistency.  With this change we flag expiring states while holding the
  lock and back off if the flag is already set.

  Reported by:	glebius

END