Age | Commit message (Expand) | Author |
2019-11-29 | Change the default security level for incoming IPsec flows from | tobhe |
2019-02-04 | Avoid an mbuf double free in the oob soreceive() path. In the | Alexander Bluhm |
2018-11-10 | Do not translate the EACCES error from pf(4) to EHOSTUNREACH anymore. | Alexander Bluhm |
2018-10-04 | Revert the inpcb table mutex commit. It triggers a witness panic | Alexander Bluhm |
2018-09-20 | As a step towards per inpcb or socket locks, remove the net lock | Alexander Bluhm |
2018-09-13 | Add reference counting for inet pcb, this will be needed when we | Alexander Bluhm |
2018-07-05 | It was possible to leak the control mbuf in raw ip user request | Alexander Bluhm |
2018-06-08 | The udp control option processing was implemented three times. | Alexander Bluhm |
2018-05-14 | When checking the IPsec enable sysctls, ipsec_common_input() had | Alexander Bluhm |
2018-04-24 | Push NET_LOCK down in the default ifioctl case. | Paul Irofti |
2018-04-06 | Use the existing pf state to speed up UDP socket lookup. This was | Alexander Bluhm |
2017-12-01 | Simplify the reverse PCB lookup logic. The PF_TAG_TRANSLATE_LOCALHOST | Alexander Bluhm |
2017-11-20 | Sprinkle some NET_ASSERT_LOCKED(), const and co to prepare running | Martin Pieuchot |
2017-11-08 | Make {ah,esp,ipcomp}stat use percpu counters. | Visa Hankala |
2017-11-02 | Move PRU_DETACH out of pr_usrreq into per proto pr_detach | Florian Obser |
2017-10-09 | Reduces the scope of the NET_LOCK() in sysctl(2) path. | Martin Pieuchot |
2017-09-05 | Replace NET_ASSERT_LOCKED() by soassertlocked() in *_usrreq(). | Martin Pieuchot |
2017-08-11 | Validate sockaddr from userland in central functions. This results | Alexander Bluhm |
2017-06-26 | Assert that the corresponding socket is locked when manipulating socket | Martin Pieuchot |
2017-05-06 | Checking for IPv4 mapped addreses and dropping the packet is done | Alexander Bluhm |
2017-05-04 | If m is not a continuous mbuf cluster, m_pullup() in pr_input may | Alexander Bluhm |
2017-04-17 | Use the address family passed down with pr_input to simplify | Alexander Bluhm |
2017-04-14 | Pass down the address family through the pr_input calls. This | Alexander Bluhm |
2017-04-05 | When building counter memory in preparation to copy to userland, always | Theo de Raadt |
2017-03-13 | Move PRU_ATTACH out of the pr_usrreq functions into pr_attach. | Claudio Jeker |
2017-02-05 | Always allocate counters memory using type M_COUNTERS. | Jeremie Courreges-Anglas |
2017-01-31 | Use CTASSERT instead of KASSERT for a few sysctl that use the counters API | Jeremie Courreges-Anglas |
2017-01-29 | Change the IPv4 pr_input function to the way IPv6 is implemented, | Alexander Bluhm |
2017-01-26 | Reduce the difference between struct protosw and ip6protosw. The | Alexander Bluhm |
2017-01-25 | Since raw_input() and route_input() are gone from pr_input, we can | Alexander Bluhm |
2016-12-19 | Remove redundant splsoftnet(). | Martin Pieuchot |
2016-12-19 | Introduce the NET_LOCK() a rwlock used to serialize accesses to the parts | Martin Pieuchot |
2016-12-10 | Pass the correct offset of the next protocol field for the given IP | Patrick Wildt |
2016-11-28 | Allow to build kernels without IPSEC but with PIPEX. | Martin Pieuchot |
2016-11-21 | Enforce that pr_usrreq functions are called at IPL_SOFTNET. | Martin Pieuchot |
2016-11-18 | turn ipstat into a set of percpu counters. | David Gwynne |
2016-11-03 | Remove obsolete vxlan_lookup return value handling | Mike Belopuhov |
2016-09-03 | Add support for a multipoint-to-multipoint mode in vxlan(4). In this | Reyk Floeter |
2016-08-16 | Add IP_SENDSRCADDR cmsg for UDP sockets. As suggested by sthen@, | Vincent Gross |
2016-08-04 | Commit in6_selectsrc() split again, with missing assignment fixed. | Vincent Gross |
2016-07-22 | Revert in_selectsrc() refactoring, it breaks IPv6. | Martin Pieuchot |
2016-07-20 | Split in6_selectsrc() into a low-level part and a pcb-level part, and | Vincent Gross |
2016-06-28 | Add UDP unicast and multicast support for IP_MINTTL/IPV6_MINHOPCOUNT | Jeremie Courreges-Anglas |
2016-06-18 | Add net.inet.{tcp,udp}.rootonly sysctl, to mark which ports | Vincent Gross |
2016-06-15 | Fix typo from rebase : extra parenthese | Vincent Gross |
2016-06-15 | Move the cmsg handling code on top of udp_output(), to make | Vincent Gross |
2016-03-23 | Merge in_pcbbind() and in6_pcbbind(), and change every call to | Vincent Gross |
2016-03-07 | Sync no-argument function declaration and definition by adding (void). | Christian Weisgerber |
2015-12-03 | To avoid that the stack manipules the pf statekeys directly, introduce | Alexander Bluhm |
2015-09-11 | in6_embedscope() needs to lose some weight. Remove the last argument. | Claudio Jeker |