| Age | Commit message (Expand) | Author |
|---|
| 2015-12-03 | Get rid of rt_mask() and stop allocating a "struct sockaddr" for every | Martin Pieuchot |
| 2015-12-03 | Remove broadcast matching from ifa_ifwithaddr(), use in_broadcast() where | Vincent Gross |
| 2015-12-03 | To avoid that the stack manipules the pf statekeys directly, introduce | Alexander Bluhm |
| 2015-12-03 | Rename pf_unlink_state() to pf_remove_state() so the name does not | Alexander Bluhm |
| 2015-12-02 | Move port picking away from in_pcbbind() | Vincent Gross |
| 2015-12-02 | - hide PF internals to pf_unlink_divert_state() from in_pcb.c | Alexandr Nedvedicky |
| 2015-10-30 | Rename rtrequest1() to rtrequest(). | Alexander Bluhm |
| 2015-10-25 | Instead of doing the the if_get() dance for rt_missmsg(), change the | Alexander Bluhm |
| 2015-10-23 | ``rt_ifp'' cannot be NULL. | Martin Pieuchot |
| 2015-10-20 | At guenther's suggestion replace dnssocket() with a SOCK_DNS flag on | Theo de Raadt |
| 2015-10-19 | Stop checking for RTF_UP directly, call rtisvalid(9) instead. | Martin Pieuchot |
| 2015-10-19 | deduplicate in[6]_pcbbind() port scan loop. | Vincent Gross |
| 2015-10-18 | Add two new system calls: dnssocket() and dnsconnect(). This creates a | Theo de Raadt |
| 2015-10-09 | Rename tame() to pledge(). This fairly interface has evolved to be more | Theo de Raadt |
| 2015-09-22 | Remove inpt_lastport from struct inpcbtable, use local variables | Vincent Gross |
| 2015-09-11 | Convert _TM_ flags to TAME_ flags, collapsing the entire mapping | Theo de Raadt |
| 2015-09-11 | Stricter checks on sockaddr content when binding PF_INET sockets. | Vincent Gross |
| 2015-09-11 | Only include <sys/tame.h> in the .c files that need it | Philip Guenther |
| 2015-09-09 | if_put after you if_get | David Gwynne |
| 2015-09-01 | Replace sockaddr casts with the proper satosin(), ... calls. | Alexander Bluhm |
| 2015-08-22 | Move to tame(int flags, char *paths[]) API/ABI. | Theo de Raadt |
| 2015-08-19 | Convert all calls to rtrequest1() and the following error check | Alexander Bluhm |
| 2015-07-19 | tame(2) is a subsystem which restricts programs into a "reduced feature | Theo de Raadt |
| 2015-07-15 | m_freem() can handle NULL, do not check for this condition beforehands. | Theo de Raadt |
| 2015-04-16 | remove unfinished/unused support for socket-attached ipsec-policies | Markus Friedl |
| 2015-04-14 | Remove support for storing credentials and auth information in the kernel. | Mike Belopuhov |
| 2015-02-10 | bzero -> memset and unify sizeof() usage (no space). | Claudio Jeker |
| 2015-02-10 | Nuke sin_zero before passing it on down into the ifa_ifwithaddr() that | Claudio Jeker |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2014-12-17 | Use an interface index instead of a pointer for multicast options. | Martin Pieuchot |
| 2014-12-05 | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | Martin Pieuchot |
| 2014-11-18 | move arc4random prototype to systm.h. more appropriate for most code | Ted Unangst |
| 2014-11-15 | use siphash in the in_pcb hashing. this mitigates it against flooding | David Gwynne |
| 2014-10-28 | Select a proper source address when the bound address is | YASUOKA Masahiko |
| 2014-10-14 | Use rtfree() instead of RTFREE(), NULLify some free'd route pointers and | Martin Pieuchot |
| 2014-09-27 | Kill rtalloc() and update rtalloc1() and rtalloc_mpath() to no longer | Martin Pieuchot |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-07-12 | Resize the pcb hashtable automatically. The table size will be doubled | YASUOKA Masahiko |
| 2014-06-04 | Only use ifa_ifwithaddr() to check if the binding address is on the | Martin Pieuchot |
| 2014-05-07 | Remove the last hacks concerning the global list of IPv4 addresses in the | Martin Pieuchot |
| 2014-04-18 | Invert the signature logic of in{,6}_selectsrc, make them return the | Jeremie Courreges-Anglas |
| 2014-04-16 | Merge in_fixaddr() into in_selectsrc() in order to prepare for | Martin Pieuchot |
| 2014-04-07 | Retire kernel support for SO_DONTROUTE, this time without breaking | Martin Pieuchot |
| 2014-04-06 | factor out source and destination address mangling from in_pcbconnect() | Christopher Zimmermann |
| 2014-04-06 | Remove redundant call to in{,6}_pcbbind() from tcp PRU_CONNECT. | Christopher Zimmermann |
| 2014-03-28 | revert "Retire kernel support for SO_DONTROUTE" diff, which does bad things | Stuart Henderson |
| 2014-03-27 | Retire kernel support for SO_DONTROUTE, since the plan is to always | Martin Pieuchot |
| 2014-01-18 | There was an awkward behaviour after a connection had been diverted | Alexander Bluhm |
| 2013-12-20 | Switch inpt_queue from CIRCLEQ to TAILQ. Thus ending use of CIRCLEQ | Kenneth R Westerback |
| 2013-10-23 | Back when some NRL code was merged into KAME to create the *BSD IPV6 | Theo de Raadt |
