8992 …u_int tunnel_interface_index = inp->inp_policyresult.results.result_parameter.tunnel_interface_ind…  in necp_socket_ip_tunnel_tso()
9008 …if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SOCKET_SCOPED && (inp->inp_f…  in necp_unscope()
9063 			inp->inp_policyresult.results.filter_control_unit = 0;  in necp_socket_find_policy_match()
9064 			inp->inp_policyresult.results.flow_divert_aggregate_unit = 0;  in necp_socket_find_policy_match()
9065 			inp->inp_policyresult.results.route_rule_id = 0;  in necp_socket_find_policy_match()
9067 				inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_PASS;  in necp_socket_find_policy_match()
9069 				inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_DROP;  in necp_socket_find_policy_match()
9085 		inp->inp_policyresult.results.filter_control_unit = 0;  in necp_socket_find_policy_match()
9086 		inp->inp_policyresult.results.flow_divert_aggregate_unit = 0;  in necp_socket_find_policy_match()
9087 		inp->inp_policyresult.results.route_rule_id = 0;  in necp_socket_find_policy_match()
9088 		inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_PASS;  in necp_socket_find_policy_match()
9137 		inp->inp_policyresult.results.filter_control_unit = filter_control_unit;  in necp_socket_find_policy_match()
9138 		inp->inp_policyresult.results.flow_divert_aggregate_unit = flow_divert_aggregate_unit;  in necp_socket_find_policy_match()
9139 		inp->inp_policyresult.results.route_rule_id = 0;  in necp_socket_find_policy_match()
9140 		inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_PASS;  in necp_socket_find_policy_match()
9180 					inp->inp_policyresult.results.filter_control_unit = 0;  in necp_socket_find_policy_match()
9181 					inp->inp_policyresult.results.flow_divert_aggregate_unit = 0;  in necp_socket_find_policy_match()
9182 					inp->inp_policyresult.results.route_rule_id = 0;  in necp_socket_find_policy_match()
9183 					inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_DROP;  in necp_socket_find_policy_match()
9217 		inp->inp_policyresult.results.filter_control_unit = filter_control_unit;  in necp_socket_find_policy_match()
9218 		inp->inp_policyresult.results.flow_divert_aggregate_unit = flow_divert_aggregate_unit;  in necp_socket_find_policy_match()
9219 		inp->inp_policyresult.results.route_rule_id = route_rule_id;  in necp_socket_find_policy_match()
9220 		inp->inp_policyresult.results.result = matched_policy->result;  in necp_socket_find_policy_match()
9221 …memcpy(&inp->inp_policyresult.results.result_parameter, &matched_policy->result_parameter, sizeof(…  in necp_socket_find_policy_match()
9265 			inp->inp_policyresult.results.filter_control_unit = filter_control_unit;  in necp_socket_find_policy_match()
9266 			inp->inp_policyresult.results.flow_divert_aggregate_unit = flow_divert_aggregate_unit;  in necp_socket_find_policy_match()
9267 			inp->inp_policyresult.results.route_rule_id = route_rule_id;  in necp_socket_find_policy_match()
9268 			inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_SOCKET_DIVERT;  in necp_socket_find_policy_match()
9269 …inp->inp_policyresult.results.result_parameter.flow_divert_control_unit = flow_divert_control_unit;  in necp_socket_find_policy_match()
9276 			inp->inp_policyresult.results.filter_control_unit = 0;  in necp_socket_find_policy_match()
9277 			inp->inp_policyresult.results.flow_divert_aggregate_unit = 0;  in necp_socket_find_policy_match()
9278 			inp->inp_policyresult.results.route_rule_id = 0;  in necp_socket_find_policy_match()
9279 			inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_DROP;  in necp_socket_find_policy_match()
9288 …inp->inp_policyresult.results.filter_control_unit = filter_control_unit; // We may have matched a …  in necp_socket_find_policy_match()
9289 			inp->inp_policyresult.results.flow_divert_aggregate_unit = flow_divert_aggregate_unit;  in necp_socket_find_policy_match()
9290 …inp->inp_policyresult.results.route_rule_id = route_rule_id; // We may have matched a route rule, …  in necp_socket_find_policy_match()
9291 			inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_NONE;  in necp_socket_find_policy_match()
9302 		inp->inp_policyresult.results.filter_control_unit = 0;  in necp_socket_find_policy_match()
9303 		inp->inp_policyresult.results.flow_divert_aggregate_unit = 0;  in necp_socket_find_policy_match()
9304 		inp->inp_policyresult.results.route_rule_id = 0;  in necp_socket_find_policy_match()
9305 		inp->inp_policyresult.results.result = NECP_KERNEL_POLICY_RESULT_DROP;  in necp_socket_find_policy_match()
10366 …qos_marking = necp_lookup_current_qos_marking(&(inp->inp_policyresult.results.qos_marking_gencount…  in necp_socket_update_qos_marking()
10982 			if (inp->inp_policyresult.results.route_rule_id != 0) {  in necp_socket_is_allowed_to_send_recv_internal()
10984 …if (!necp_route_is_allowed(route, input_interface, NULL, 0, inp->inp_policyresult.results.route_ru…  in necp_socket_is_allowed_to_send_recv_internal()
10993 			    inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_DROP ||  in necp_socket_is_allowed_to_send_recv_internal()
10994 			    inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SOCKET_DIVERT ||  in necp_socket_is_allowed_to_send_recv_internal()
10995 … (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_IP_TUNNEL && input_interface &&  in necp_socket_is_allowed_to_send_recv_internal()
10996 			    inp->inp_policyresult.results.result_parameter.tunnel_interface_index != verifyifindex)) {  in necp_socket_is_allowed_to_send_recv_internal()
11006 					*return_route_rule_id = inp->inp_policyresult.results.route_rule_id;  in necp_socket_is_allowed_to_send_recv_internal()
11008 				if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_PASS) {  in necp_socket_is_allowed_to_send_recv_internal()
11009 					pass_flags = inp->inp_policyresult.results.result_parameter.pass_flags;  in necp_socket_is_allowed_to_send_recv_internal()
11034 		if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_DROP ||  in necp_socket_is_allowed_to_send_recv_internal()
11035 		    inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SOCKET_DIVERT ||  in necp_socket_is_allowed_to_send_recv_internal()
11036 … (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_IP_TUNNEL && input_interface &&  in necp_socket_is_allowed_to_send_recv_internal()
11037 		    inp->inp_policyresult.results.result_parameter.tunnel_interface_index != verifyifindex) ||  in necp_socket_is_allowed_to_send_recv_internal()
11038 		    (inp->inp_policyresult.results.route_rule_id != 0 &&  in necp_socket_is_allowed_to_send_recv_internal()
11039 …!necp_route_is_allowed(route, input_interface, NULL, 0, inp->inp_policyresult.results.route_rule_i…  in necp_socket_is_allowed_to_send_recv_internal()
11047 				*return_route_rule_id = inp->inp_policyresult.results.route_rule_id;  in necp_socket_is_allowed_to_send_recv_internal()
11052 			if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_PASS) {  in necp_socket_is_allowed_to_send_recv_internal()
11053 				pass_flags = inp->inp_policyresult.results.result_parameter.pass_flags;  in necp_socket_is_allowed_to_send_recv_internal()
11074 		    inp->inp_policyresult.results.filter_control_unit != filter_control_unit) {  in necp_socket_is_allowed_to_send_recv_internal()
11075 			inp->inp_policyresult.results.filter_control_unit = filter_control_unit;  in necp_socket_is_allowed_to_send_recv_internal()
11077 		if (inp->inp_policyresult.results.flow_divert_aggregate_unit != flow_divert_aggregate_unit) {  in necp_socket_is_allowed_to_send_recv_internal()
11078 			inp->inp_policyresult.results.flow_divert_aggregate_unit = flow_divert_aggregate_unit;  in necp_socket_is_allowed_to_send_recv_internal()
11121 			    inp->inp_policyresult.results.filter_control_unit != filter_control_unit) {  in necp_socket_is_allowed_to_send_recv_internal()
11122 				inp->inp_policyresult.results.filter_control_unit = filter_control_unit;  in necp_socket_is_allowed_to_send_recv_internal()
11124 			if (inp->inp_policyresult.results.flow_divert_aggregate_unit != flow_divert_aggregate_unit) {  in necp_socket_is_allowed_to_send_recv_internal()
11125 				inp->inp_policyresult.results.flow_divert_aggregate_unit = flow_divert_aggregate_unit;  in necp_socket_is_allowed_to_send_recv_internal()
11155 			    inp->inp_policyresult.results.filter_control_unit != filter_control_unit) {  in necp_socket_is_allowed_to_send_recv_internal()
11156 				inp->inp_policyresult.results.filter_control_unit = filter_control_unit;  in necp_socket_is_allowed_to_send_recv_internal()
11158 			if (inp->inp_policyresult.results.flow_divert_aggregate_unit != flow_divert_aggregate_unit) {  in necp_socket_is_allowed_to_send_recv_internal()
11159 				inp->inp_policyresult.results.flow_divert_aggregate_unit = flow_divert_aggregate_unit;  in necp_socket_is_allowed_to_send_recv_internal()
11250 	} else if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_PASS ||  in necp_mark_packet_from_socket()
11251 	    inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_IP_TUNNEL) {  in necp_mark_packet_from_socket()
11260 		packet->m_pkthdr.necp_mtag.necp_route_rule_id = inp->inp_policyresult.results.route_rule_id;  in necp_mark_packet_from_socket()
11268 	} else if (inp->inp_policyresult.results.filter_control_unit == NECP_FILTER_UNIT_NO_FILTER) {  in necp_mark_packet_from_socket()
11279 …((inp->inp_policyresult.results.result_parameter.pass_flags & NECP_KERNEL_POLICY_PASS_PF_TAG) == N…  in necp_mark_packet_from_socket()
11443 	return inp->inp_policyresult.results.filter_control_unit;  in necp_socket_get_content_filter_control_unit()
11454 	       (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SOCKET_DIVERT ||  in necp_socket_should_use_flow_divert()
11455 	       (inp->inp_policyresult.results.flow_divert_aggregate_unit != 0));  in necp_socket_should_use_flow_divert()
11470 	    inp->inp_policyresult.results.flow_divert_aggregate_unit != 0) {  in necp_socket_get_flow_divert_control_unit()
11471 		*aggregate_unit = inp->inp_policyresult.results.flow_divert_aggregate_unit;  in necp_socket_get_flow_divert_control_unit()
11474 	if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SOCKET_DIVERT) {  in necp_socket_get_flow_divert_control_unit()
11475 		return inp->inp_policyresult.results.result_parameter.flow_divert_control_unit;  in necp_socket_get_flow_divert_control_unit()
11488 	return inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SOCKET_SCOPED ||  in necp_socket_should_rescope()
11489 	       inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SCOPED_DIRECT;  in necp_socket_should_rescope()
11499 	if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SOCKET_SCOPED) {  in necp_socket_get_rescope_if_index()
11500 		return inp->inp_policyresult.results.result_parameter.scoped_interface_index;  in necp_socket_get_rescope_if_index()
11501 	} else if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_SCOPED_DIRECT) {  in necp_socket_get_rescope_if_index()
11515 	if (inp->inp_policyresult.results.result == NECP_KERNEL_POLICY_RESULT_IP_TUNNEL &&  in necp_socket_get_effective_mtu()
11519 …u_int tunnel_interface_index = inp->inp_policyresult.results.result_parameter.tunnel_interface_ind…  in necp_socket_get_effective_mtu()