summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Collapse)Author
2003-02-28Based on several comments from tedu:Jason Wright
- two variables 'err' and 'error', whacked - missing initialization in the error path for the case where an SA expired while off in crypto land. - a small bit of knf.
2003-02-21remove useless assignmentTed Unangst
ok jason@
2003-02-21kill unused variablesTed Unangst
ok jason@
2003-02-20knfTheo de Raadt
2003-02-20If there's no tag to be reset, don't reset it (avoids a NULL deref in the ↵Jason Wright
IPCOMP case)
2003-02-19Grr, forgot to commit this earlier: add ipcomps_minlenJason Wright
2003-02-19add a counter for times ipcomp is skipped because the packet is below theJason Wright
minimum compression threshold.
2003-02-18missed in lzs addition: allow LZS as an comp typeJason Wright
2003-02-15rip_output: make sure a full ip header is passed for INP_HDRINCL; ok deraadt@Markus Friedl
2003-02-14Fix an mbuf leak, where each incoming IPv6 TCP connection (to a listeningDaniel Hartmeier
socket) would leak one MT_SONAME mbuf. ok deraadt@, henning@
2003-02-12Remove commons; inspired by netbsd.Jason Wright
2003-02-11No ICMP redirect when PF nat code redirect the packet on the LAN.Cedric Berger
ok dhartmei@
2003-02-01quite some KNF & ANSIHenning Brauer
ok theo
2003-02-01m_pad() is expected to have free'd the mbuf if it returns NULL, soDaniel Hartmeier
free it in one (rare) error condition. ok angelos@
2003-01-31KNFTheo de Raadt
2003-01-31plug a mbuf leakHenning Brauer
debugging session w/ dhartmei@ and lots of testing help from Jun <pilot at monkey.org> ok theo daniel angelos
2003-01-25don't send more than half of the send buffer space limit inMarkus Friedl
one tcp segment, improves performance of tcp over interfaces with large mtu (e.g. lo0); based on similar change in netbsd; ok djm, henning, henric, millert, deraadt
2003-01-07remove the altq classifier code which is replaced by pf and no longer used.Kenjiro Cho
ok henning@, deraadt@
2002-12-09From Andrushock, s/sucess/success/gTodd C. Miller
2002-11-19Use queue.h macrosJason Wright
2002-11-12Check for undersized IP header, found by jbm@, ok angelos@Daniel Hartmeier
2002-11-07Check for invalid payload lengths also for NULL enc. markus@, angelos@ ok.Hakan Olsson
2002-11-06fix ecn breakage.Kenjiro Cho
this part of falling back to non-ecn on timeout slipped during merge from KAME. ok @art report to bugs@ by Han Boetes and Otto Moerbeek
2002-10-15Note that this is based on RFC3378.Jason Wright
2002-10-10Missing m_pullup() and mbuf corruption. This potentially causedDaniel Hartmeier
panic: m_copym0: m == 0 and not COPYALL and/or panic: m_copydata: null muf on bridges running pf with scrubbing enabled. Bug report, test vector and confirmation by Jon Morby. ok jason@, jasoni@
2002-10-04Prevent packet processing while tweaking address and routing tables.Henric Jungheim
ok art@
2002-09-12Fix max packet size check. Noticed by <j@pureftpd.org>. jjbg@ ok.Hakan Olsson
2002-09-11fix pointer signedness mixup.Jun-ichiro itojun Hagino
2002-09-11KNF - return is not a function. sync w/kameJun-ichiro itojun Hagino
2002-09-05never append data to shutdown(s, SHUT_RD) socket. can lead to unexpectedJun-ichiro itojun Hagino
kernel resource consumption. NetBSD PR 18185
2002-09-04Ghosts from the past (fixed 1.65, reverted 1.66) rediscovered byDaniel Hartmeier
Henric Jungheim. ok deraadt@
2002-09-04pass struct proc * down to in6_pcbsetportJun-ichiro itojun Hagino
2002-08-28Fix a problem where passing NULL as a pointer with varargs does not promotePer Fogelstrom
NULL to full 64 bits on a 64 bit address system. Soultion is to add a (void *) cast before NULL. This makes a 64 bit MIPS kernel work and will probably help future 64 bit ports as well. OK from art@
2002-08-19committed by mistake - i'm still working on theseJun-ichiro itojun Hagino
2002-08-19be consistent with other KAME source, use "ip6" for ip6_hdr, not "ipv6".Jun-ichiro itojun Hagino
2002-08-19merge in IPv6 deprecated address handling from KAME.Jun-ichiro itojun Hagino
2002-08-16pass unprocessed GRE packet to raw ip socket. binkertn@ okJun-ichiro itojun Hagino
2002-08-08redo socketbuf speedup.Niels Provos
2002-08-08backout the tree break. ok pb@, art@Todd T. Fries
2002-08-08socket buf speedup from thorpej@netbsd, okay art@ ericj@:Niels Provos
Make insertion of data into socket buffers O(C): * Keep pointers to the first and last mbufs of the last record in the socket buffer. * Use the sb_lastrecord pointer in the sbappend*() family of functions to avoid traversing the packet chain to find the last record. * Add a new sbappend_stream() function for stream protocols which guarantee that there will never be more than one record in the socket buffer. This function uses the sb_mbtail pointer to perform the data insertion. Make TCP use sbappend_stream(). On a profiling run, this makes sbappend of a TCP transmission using a 1M socket buffer go from 50% of the time to .02% of the time. Thanks to Bill Sommerfeld and YAMAMOTO Takashi for their debugging assistance!
2002-07-31remove $Id$Jun-ichiro itojun Hagino
2002-07-30Be sure to check the integrity verifier for packets that didn't have it doneJason Wright
in hardware; from angelos
2002-07-29be friendly with gcc-3.1.1 -O2, which takes advantage of ANSI CJun-ichiro itojun Hagino
pointer aliasing rule (gcc optimization/7427). from tsubai@netbsd, sync w/kame
2002-07-12- Add a flags argument to dohooks.Artur Grabowski
The flag can be either HOOK_REMOVE or HOOK_REMOVE|HOOK_FREE. o HOOK_REMOVE removes the hook from the list before executing it. o HOOK_FREE frees the hook after that. - Let dostartuphooks use HOOK_REMOVE|HOOK_FREE so we can reclaim the memory. - Let doshutdownhooks use HOOK_REMOVE so that when some shutdown hook panics (they do that all the #@$%! time these days) we don't loop for ever. Don't HOOK_FREE, it doesn't matter and I don't want to add another possible panic condition for shutdown hooks. - Actually free the pointer we're throwing away in hook_disestablish (I wonder how much memory this has leaked over the years).
2002-07-05Free crp_opaque only after we've determined we're not going toAngelos D. Keromytis
re-submit it. From sam@errno.com
2002-07-05Also, return EAFNOSUPPORT instead of ENOBUFS. Both this and theAngelos D. Keromytis
previous commit where noted by sam@errno.com
2002-07-05Bump ipips_family in ipipstat in all cases where EAFNOSUPPORT is returned.Angelos D. Keromytis
2002-07-03Change all variables definitions (int foo) in sys/sys/*.h to variableMiod Vallat
declarations (extern int foo), and compensate in the appropriate locations.
2002-07-01Move mtod() after the m_pullup() --- noted by sam@errno.com (who seemsAngelos D. Keromytis
to be going over the IPsec code with a magnifying glass)
2002-06-28Fix usage counter for IPCOMP --- sam@errno.comAngelos D. Keromytis