Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-02-28 | Based on several comments from tedu: | Jason Wright | |
- two variables 'err' and 'error', whacked - missing initialization in the error path for the case where an SA expired while off in crypto land. - a small bit of knf. | |||
2003-02-21 | remove useless assignment | Ted Unangst | |
ok jason@ | |||
2003-02-21 | kill unused variables | Ted Unangst | |
ok jason@ | |||
2003-02-20 | knf | Theo de Raadt | |
2003-02-20 | If there's no tag to be reset, don't reset it (avoids a NULL deref in the ↵ | Jason Wright | |
IPCOMP case) | |||
2003-02-19 | Grr, forgot to commit this earlier: add ipcomps_minlen | Jason Wright | |
2003-02-19 | add a counter for times ipcomp is skipped because the packet is below the | Jason Wright | |
minimum compression threshold. | |||
2003-02-18 | missed in lzs addition: allow LZS as an comp type | Jason Wright | |
2003-02-15 | rip_output: make sure a full ip header is passed for INP_HDRINCL; ok deraadt@ | Markus Friedl | |
2003-02-14 | Fix an mbuf leak, where each incoming IPv6 TCP connection (to a listening | Daniel Hartmeier | |
socket) would leak one MT_SONAME mbuf. ok deraadt@, henning@ | |||
2003-02-12 | Remove commons; inspired by netbsd. | Jason Wright | |
2003-02-11 | No ICMP redirect when PF nat code redirect the packet on the LAN. | Cedric Berger | |
ok dhartmei@ | |||
2003-02-01 | quite some KNF & ANSI | Henning Brauer | |
ok theo | |||
2003-02-01 | m_pad() is expected to have free'd the mbuf if it returns NULL, so | Daniel Hartmeier | |
free it in one (rare) error condition. ok angelos@ | |||
2003-01-31 | KNF | Theo de Raadt | |
2003-01-31 | plug a mbuf leak | Henning Brauer | |
debugging session w/ dhartmei@ and lots of testing help from Jun <pilot at monkey.org> ok theo daniel angelos | |||
2003-01-25 | don't send more than half of the send buffer space limit in | Markus Friedl | |
one tcp segment, improves performance of tcp over interfaces with large mtu (e.g. lo0); based on similar change in netbsd; ok djm, henning, henric, millert, deraadt | |||
2003-01-07 | remove the altq classifier code which is replaced by pf and no longer used. | Kenjiro Cho | |
ok henning@, deraadt@ | |||
2002-12-09 | From Andrushock, s/sucess/success/g | Todd C. Miller | |
2002-11-19 | Use queue.h macros | Jason Wright | |
2002-11-12 | Check for undersized IP header, found by jbm@, ok angelos@ | Daniel Hartmeier | |
2002-11-07 | Check for invalid payload lengths also for NULL enc. markus@, angelos@ ok. | Hakan Olsson | |
2002-11-06 | fix ecn breakage. | Kenjiro Cho | |
this part of falling back to non-ecn on timeout slipped during merge from KAME. ok @art report to bugs@ by Han Boetes and Otto Moerbeek | |||
2002-10-15 | Note that this is based on RFC3378. | Jason Wright | |
2002-10-10 | Missing m_pullup() and mbuf corruption. This potentially caused | Daniel Hartmeier | |
panic: m_copym0: m == 0 and not COPYALL and/or panic: m_copydata: null muf on bridges running pf with scrubbing enabled. Bug report, test vector and confirmation by Jon Morby. ok jason@, jasoni@ | |||
2002-10-04 | Prevent packet processing while tweaking address and routing tables. | Henric Jungheim | |
ok art@ | |||
2002-09-12 | Fix max packet size check. Noticed by <j@pureftpd.org>. jjbg@ ok. | Hakan Olsson | |
2002-09-11 | fix pointer signedness mixup. | Jun-ichiro itojun Hagino | |
2002-09-11 | KNF - return is not a function. sync w/kame | Jun-ichiro itojun Hagino | |
2002-09-05 | never append data to shutdown(s, SHUT_RD) socket. can lead to unexpected | Jun-ichiro itojun Hagino | |
kernel resource consumption. NetBSD PR 18185 | |||
2002-09-04 | Ghosts from the past (fixed 1.65, reverted 1.66) rediscovered by | Daniel Hartmeier | |
Henric Jungheim. ok deraadt@ | |||
2002-09-04 | pass struct proc * down to in6_pcbsetport | Jun-ichiro itojun Hagino | |
2002-08-28 | Fix a problem where passing NULL as a pointer with varargs does not promote | Per Fogelstrom | |
NULL to full 64 bits on a 64 bit address system. Soultion is to add a (void *) cast before NULL. This makes a 64 bit MIPS kernel work and will probably help future 64 bit ports as well. OK from art@ | |||
2002-08-19 | committed by mistake - i'm still working on these | Jun-ichiro itojun Hagino | |
2002-08-19 | be consistent with other KAME source, use "ip6" for ip6_hdr, not "ipv6". | Jun-ichiro itojun Hagino | |
2002-08-19 | merge in IPv6 deprecated address handling from KAME. | Jun-ichiro itojun Hagino | |
2002-08-16 | pass unprocessed GRE packet to raw ip socket. binkertn@ ok | Jun-ichiro itojun Hagino | |
2002-08-08 | redo socketbuf speedup. | Niels Provos | |
2002-08-08 | backout the tree break. ok pb@, art@ | Todd T. Fries | |
2002-08-08 | socket buf speedup from thorpej@netbsd, okay art@ ericj@: | Niels Provos | |
Make insertion of data into socket buffers O(C): * Keep pointers to the first and last mbufs of the last record in the socket buffer. * Use the sb_lastrecord pointer in the sbappend*() family of functions to avoid traversing the packet chain to find the last record. * Add a new sbappend_stream() function for stream protocols which guarantee that there will never be more than one record in the socket buffer. This function uses the sb_mbtail pointer to perform the data insertion. Make TCP use sbappend_stream(). On a profiling run, this makes sbappend of a TCP transmission using a 1M socket buffer go from 50% of the time to .02% of the time. Thanks to Bill Sommerfeld and YAMAMOTO Takashi for their debugging assistance! | |||
2002-07-31 | remove $Id$ | Jun-ichiro itojun Hagino | |
2002-07-30 | Be sure to check the integrity verifier for packets that didn't have it done | Jason Wright | |
in hardware; from angelos | |||
2002-07-29 | be friendly with gcc-3.1.1 -O2, which takes advantage of ANSI C | Jun-ichiro itojun Hagino | |
pointer aliasing rule (gcc optimization/7427). from tsubai@netbsd, sync w/kame | |||
2002-07-12 | - Add a flags argument to dohooks. | Artur Grabowski | |
The flag can be either HOOK_REMOVE or HOOK_REMOVE|HOOK_FREE. o HOOK_REMOVE removes the hook from the list before executing it. o HOOK_FREE frees the hook after that. - Let dostartuphooks use HOOK_REMOVE|HOOK_FREE so we can reclaim the memory. - Let doshutdownhooks use HOOK_REMOVE so that when some shutdown hook panics (they do that all the #@$%! time these days) we don't loop for ever. Don't HOOK_FREE, it doesn't matter and I don't want to add another possible panic condition for shutdown hooks. - Actually free the pointer we're throwing away in hook_disestablish (I wonder how much memory this has leaked over the years). | |||
2002-07-05 | Free crp_opaque only after we've determined we're not going to | Angelos D. Keromytis | |
re-submit it. From sam@errno.com | |||
2002-07-05 | Also, return EAFNOSUPPORT instead of ENOBUFS. Both this and the | Angelos D. Keromytis | |
previous commit where noted by sam@errno.com | |||
2002-07-05 | Bump ipips_family in ipipstat in all cases where EAFNOSUPPORT is returned. | Angelos D. Keromytis | |
2002-07-03 | Change all variables definitions (int foo) in sys/sys/*.h to variable | Miod Vallat | |
declarations (extern int foo), and compensate in the appropriate locations. | |||
2002-07-01 | Move mtod() after the m_pullup() --- noted by sam@errno.com (who seems | Angelos D. Keromytis | |
to be going over the IPsec code with a magnifying glass) | |||
2002-06-28 | Fix usage counter for IPCOMP --- sam@errno.com | Angelos D. Keromytis | |