| Age | Commit message (Expand) | Author |
|---|
| 2017-11-08 | Make {ah,esp,ipcomp}stat use percpu counters. | Visa Hankala |
| 2017-11-06 | Use %s and __func__ in DPRINTF() to reduce false positive with grep(1). | Martin Pieuchot |
| 2017-08-11 | Remove NET_LOCK()'s argument. | Martin Pieuchot |
| 2017-05-30 | add sizes to free() calls | Theo de Raadt |
| 2017-02-09 | Put back a return that I have removed by accident. | Alexander Bluhm |
| 2017-02-07 | IPsec packets could be dropped unaccounted if output after crypto | Alexander Bluhm |
| 2017-02-07 | Reduce the per-packet allocation costs for crypto operations (cryptop) | Patrick Wildt |
| 2017-02-07 | The return code of crp_callback is never checked, so it is not | Alexander Bluhm |
| 2017-01-09 | Grab the NET_LOCK() in various callbacks. | Martin Pieuchot |
| 2016-12-24 | Grab the NET_LOCK() before calling ipsp_process_done() as it ends up | Martin Pieuchot |
| 2016-09-19 | convert bcopy to memcpy. from david hill. | Ted Unangst |
| 2016-09-13 | avoid extensive mbuf allocation for IPsec by replacing m_inject(4) | Markus Friedl |
| 2016-08-18 | fix panics caused by replacing m_copym2 with m_dup_pkt. | David Gwynne |
| 2016-08-15 | replace the last uses of m_copym2 with m_dup_pkt. | David Gwynne |
| 2016-03-07 | Sync no-argument function declaration and definition by adding (void). | Christian Weisgerber |
| 2015-07-15 | m_freem() can handle NULL, do not check for this condition beforehands. | Theo de Raadt |
| 2015-06-15 | Use proper argument type for crp_callback functions; no functional change. | Mike Belopuhov |
| 2015-04-17 | Stubs and support code for NIC-enabled IPsec bite the dust. | Mike Belopuhov |
| 2015-04-14 | make ipsp_address thread safe; ok mpi | Mike Belopuhov |
| 2014-12-28 | remove KPDK. not really used, and a bad choice anyway. ok naddy | Ted Unangst |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-12-05 | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | Martin Pieuchot |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-07-12 | add a size argument to free. will be used soon, but for now default to 0. | Ted Unangst |
| 2014-07-09 | bpf code surgery / shuffling / simplification. | Henning Brauer |
| 2014-01-09 | bzero/bcmp -> memset/memcmp. ok matthew | Ted Unangst |
| 2013-06-11 | Replace all ovbcopy with memmove; swap the src and dst arguments too | Theo de Raadt |
| 2013-04-11 | Remove the extern keyword from function declarations, document | Martin Pieuchot |
| 2013-02-14 | Merge of an original work by markus@ and gerhard@ to increase | Mike Belopuhov |
| 2012-10-18 | simplify checkreplaywindow() API; make call/return code handling consistent | Markus Friedl |
| 2012-09-26 | add M_ZEROIZE as an mbuf flag, so copied PFKEY messages (with embedded keys) | Markus Friedl |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former | Bret Lambert |
| 2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | Markus Friedl |
| 2012-06-29 | Add support for the Extended (64-bit) Sequence Number as defined | Mike Belopuhov |
| 2011-01-11 | for key material that is being being discarded, convert bzero() to | Theo de Raadt |
| 2010-07-20 | Switch some obvious network stack MAC comparisons from bcmp() to | Matthew Dempsky |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
| 2010-07-02 | m_copyback can fail to allocate memory, but is a void fucntion so gymnastics | Bret Lambert |
| 2010-07-01 | Allow to specify an alternative enc(4) interface for an SA. All | Reyk Floeter |
| 2010-06-29 | Replace enc(4) with a new implementation as a cloner device. We still | Reyk Floeter |
| 2010-01-10 | Fix two bugs in IPsec/HMAC-SHA2: | Markus Friedl |
| 2008-09-15 | remove dead stores and newly created unused variables. | Charles Longeau |
| 2007-10-17 | Convert MALLOC/FREE to malloc/free. | Hans-Joerg Hoexer |
| 2007-10-09 | MALLOC+bzero -> malloc+M_ZERO. Don't forget FREE->free this time. | Kenneth R Westerback |
| 2007-02-14 | Consistently spell FALLTHROUGH to appease lint. | Jonathan Gray |
| 2007-02-08 | - AH: when computing crypto checksum for output, massage source-routing | Jun-ichiro itojun Hagino |
| 2006-12-15 | make enc(4) count; ok markus@ henning@ deraadt@ | Otto Moerbeek |
| 2006-12-13 | use IN6_IS_SCOPE_EMBED to check kernel-internal form addresses | Jun-ichiro itojun Hagino |
| 2006-05-28 | Only preemptively increase the replay counter for outbound TDBs. | Ryan Thomas McBride |
| 2006-03-25 | allow bpf(4) to ignore packets based on their direction (inbound or | Damien Miller |
