returns 1 if the IP address does NOT belong to the

        returns 1 if the IP address does NOT belong to the

        <application>jail</application> or 0 otherwise.  As you can see

        <application>jail</application> or 0 otherwise.  As you can see

        from the code, if it is indeed an IP address not belonging to the

        from the code, if it is indeed an IP address not belonging to the

        to that address.</para>

        to that address.</para>

      <programlisting><filename>/usr/src/sys/kern/kern_jail.c:</filename>

      <programlisting><filename>/usr/src/sys/kern/kern_jail.c:</filename>

	permitted to sleep, limiting the use of primitives in

	permitted to sleep, limiting the use of primitives in

	those entry points to mutexes and wakeup operations.</para>

	those entry points to mutexes and wakeup operations.</para>

	they will generally need to release any in-policy locks in

	they will generally need to release any in-policy locks in

	order to avoid violating the kernel lock order or risking

	order to avoid violating the kernel lock order or risking

	lock recursion.  This will maintain policy locks as leaf

	lock recursion.  This will maintain policy locks as leaf

      designed to reduce hardware complexity by requiring the host

      designed to reduce hardware complexity by requiring the host

      controller driver to supply a complete schedule of the transfers

      controller driver to supply a complete schedule of the transfers

      for each frame. OHCI type controllers are much more independent

      for each frame. OHCI type controllers are much more independent

      themselves. </para>

      themselves. </para>

    <sect2>

    <sect2>

        is aware of scheduling priorities and the ordering of the

        is aware of scheduling priorities and the ordering of the

        types of transfers in a frame. The main data structure used by

        types of transfers in a frame. The main data structure used by

        the host controller is the endpoint descriptor (ED) to which

        the host controller is the endpoint descriptor (ED) to which

        contains the maximum packet size allowed for an endpoint and

        contains the maximum packet size allowed for an endpoint and

        the controller hardware does the splitting into packets. The

        the controller hardware does the splitting into packets. The

        pointers to the data buffers are updated after each transfer

        pointers to the data buffers are updated after each transfer