close pr 10889:

+ add a missing call to dn_rule_delete() when flushing firewall
  rules, thus preventing possible panics due to dangling pointers
  (this was already done for single rule deletes).
+ improve "usage" output in ipfw(8)
+ add a few checks to ipfw pipe parameters and make it a bit more
  tolerant of common mistakes (such as specifying kbit instead of Kbit)

PR: kern/10889
Submitted by: Ruslan Ermilov

1 files changed, 4 insertions, 1 deletions

diff --git a/sys/netinet/ip_fw.c b/sys/netinet/ip_fw.c
index f214109..557dcf0 100644
--- a/sys/netinet/ip_fw.c
+++ b/sys/netinet/ip_fw.c
@@ -12,7 +12,7 @@
  *
  * This software is provided ``AS IS'' without any warranties of any kind.
  *
- *	$Id: ip_fw.c,v 1.110 1999/04/26 14:57:24 luigi Exp $
+ *	$Id: ip_fw.c,v 1.111 1999/05/03 23:57:28 billf Exp $
  */
 
 /*
@@ -1175,6 +1175,9 @@ ip_fw_ctl(struct sockopt *sopt)
 		     fcp = ip_fw_chain.lh_first) {
 			s = splnet();
 			LIST_REMOVE(fcp, chain);
+#ifdef DUMMYNET
+			dn_rule_delete(fcp);
+#endif
 			FREE(fcp->rule, M_IPFW);
 			FREE(fcp, M_IPFW);
 			splx(s);