Sorry, I think I don't understand your question - could you explain it more thoroughly, maybe on some example?
Because the reception is (by the CAN standard) unaffected, node sees/receives messages the same way it did before in the error active/passive mode. Node cannot transmit its own messages, error flags and acknowledge received messages.
Of course, in your implementation, you can ignore received messages when the ECU is in bus off state (because the node or the bus are probably corrupted), but this is not mandatory.
Even the recovery sequence requires the ECU to sense 128 repetitions of 11 consecutive recessive bits (typically delimiters of the CAN messages) on the bus to get back from the bus off mode to the normal mode.
BR,
Jaroslav