The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=d18ed24a9e9b156770391afad92f32fe860a7ca9
commit d18ed24a9e9b156770391afad92f32fe860a7ca9 Author: Kristof Provost <k...@freebsd.org> AuthorDate: 2025-06-27 08:28:05 +0000 Commit: Kristof Provost <k...@freebsd.org> CommitDate: 2025-06-30 07:53:27 +0000 pf: trade few 'goto unlock: for 'break' in pf_test() OK mpi@, OK henning@, OK jca@ Obtained from: OpenBSD, sashan <sas...@openbsd.org>, 18b958d7c9 Sponsored by: Rubicon Communications, LLC ("Netgate") --- sys/netpfil/pf/pf.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/sys/netpfil/pf/pf.c b/sys/netpfil/pf/pf.c index 41fd8a441a05..b24bbe036141 100644 --- a/sys/netpfil/pf/pf.c +++ b/sys/netpfil/pf/pf.c @@ -10593,7 +10593,7 @@ pf_test(sa_family_t af, int dir, int pflags, struct ifnet *ifp, struct mbuf **m0 use_2nd_queue = 1; action = pf_normalize_tcp(&pd); if (action == PF_DROP) - goto done; + break; action = pf_test_state(&s, &pd, &reason); if (action == PF_PASS || action == PF_AFRT) { if (V_pfsync_update_state_ptr != NULL) @@ -10642,7 +10642,7 @@ pf_test(sa_family_t af, int dir, int pflags, struct ifnet *ifp, struct mbuf **m0 case IPPROTO_SCTP: action = pf_normalize_sctp(&pd); if (action == PF_DROP) - goto done; + break; /* fallthrough */ case IPPROTO_UDP: default: @@ -10665,14 +10665,14 @@ pf_test(sa_family_t af, int dir, int pflags, struct ifnet *ifp, struct mbuf **m0 REASON_SET(&reason, PFRES_NORM); DPFPRINTF(PF_DEBUG_MISC, ("dropping IPv6 packet with ICMPv4 payload")); - goto done; + break; } if (pd.virtual_proto == IPPROTO_ICMPV6 && af != AF_INET6) { action = PF_DROP; REASON_SET(&reason, PFRES_NORM); DPFPRINTF(PF_DEBUG_MISC, ("pf: dropping IPv4 packet with ICMPv6 payload\n")); - goto done; + break; } action = pf_test_state_icmp(&s, &pd, &reason); if (action == PF_PASS || action == PF_AFRT) {