Replace if (af) tests operating as an af blacklist with stricter switch statements operating as a whitelist, taking care to allow af 0 (which is the wildcard value in pf rules)
Replace if (af) tests operating as an af blacklist with stricter switch
statements operating as a whitelist, taking care to allow af 0 (which is
the wildcard value in pf rules)

diff from Vadim Zhukov
ok henning

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars