K 10
svn:author
V 7
glebius
K 8
svn:date
V 27
2014-03-11T15:43:06.194486Z
K 7
svn:log
V 564
Merge r261882, r261898, r261937, r262760, r262799:
  Once pf became not covered by a single mutex, many counters in it became
  race prone. Some just gather statistics, but some are later used in
  different calculations.

  A real problem was the race provoked underflow of the states_cur counter
  on a rule. Once it goes below zero, it wraps to UINT32_MAX. Later this
  value is used in pf_state_expires() and any state created by this rule
  is immediately expired.

  Thus, make fields states_cur, states_tot and src_nodes of struct
  pf_rule be counter(9)s.

END