Age | Commit message (Collapse) | Author |
|
(unplugged). Even if it makes no sense to keep them around if the
interface is no more, we cannot safely remove them since pcb multicast
options might keep a pointer to them.
Fixes a user after free introduced by the multicast address linking
rewrite and reported by Alexey Suslikov, thanks!
ok claudio@
|
|
OK benno@ deraadt@
|
|
to a socket. When the application removed the socket, the pf state
would persist. A new connection did not hit the divert rule as the
state still grabed the packet. The solution is to unlink the
associated divert state when the socket gets destroyed. This is
possible as both are linked together and a divert state without
socket does not make sense.
OK mikeb@
|
|
consistent with struct ifaddr "ifa" and struct in_ifaddr "ia".
OK mpi@
|
|
in IFP_TO_IA().
ok bluhm@, henning@, mikeb@
|
|
sprinkle 0 -> NULL where obvious
ok millert mpi
|
|
|
|
|
|
the ifp pointer which can be NULL. This prevents a crash reported
by David Hill <dhill at mindcry ! org>. OK bluhm
|
|
|
|
in the base. Ports fixes to follow shortly for the two ports (gkrellm
and net-snmp) affected.
ok zhuk@ millert@
|
|
instead of variable arguments.
Allows stricter type checking by the compiler at call sites and also
saves a bit of code size on some platforms (e.g., ~200 bytes on
amd64).
ok mikeb
|
|
|
|
|
|
Instead of linking multicast records to the first configured address of
the corresponding protocol, making this address and its position in the
global list special, add them to a new list directly linked to the
interface descriptor.
This new multicast address list is similar to the address list, all its
elements contain a protocol agnostic part. This design allows us to
be able to join a multicast group without necessarily having a configured
address. That means IPv6 multicast kludges are no longer needed.
Another benefit is to be able to add and remove an IP address from an
interface without worrying about multicast records. That means that the
global IPv4 list is no longer needed since the first configured address
of an interface is no longer special.
This new list might also be extended in the future to contain the
link-layer addresses used to configure hardware filters.
Tested by sthen@ and weerd@, ok mikeb@
|
|
dereferencing the mbuf various times. No functional change.
ok mpf@, bluhm@
|
|
use it instead of dereferencing the mbuf once again. No functional change.
|
|
ok mikeb@, ports@, henning@
|
|
ok mikeb@, henning@, claudio@
|
|
it is needed and the lower parts of the stack will take care of it.
fixes a cksum bug in a rather constructed case and is just the right thing
to do now. ok mpi naddy
|
|
ok henning@, mikeb@
|
|
multicast macros and in_ifaddr) that reference ifnet in some way;
looked over by deraadt, ok mpi
|
|
ok deraadt@
|
|
ok henning@, sthen@, mikeb@, deraadt@
|
|
just call ip_stripoptions(). Remove an unneeded parameter and
adjust the ip length in ip_stripoptions().
from FreeBSD; OK deraadt@ henninh@ lteo@
|
|
divert6_packet() from "pd" to "divert" to match the rest of the source.
I think "pd" was not a good name for a struct pf_divert because "pd"
usually refers to a pf_pdesc.
No object file change.
OK benno@ bluhm@ henning@
|
|
network to presentation format to inet_ntop().
The few remaining functions will be soon converted.
ok mikeb@, deraadt@ and moral support from henning@
|
|
accepts either format, but we start using the IETF bits. Hopefully we
get a mail later again from David Dahlberg reminding us to remove the
legacy acceptance.
|
|
to 64 bit. Increase the routing message version from 4 to 5. Add
a small compatibility layer that allows to set routes with old user
land and new kernel. Old kernel with new user land does not work.
The compatibility layer ist not perfect, but it allows to configure
addresses with old ifconfig and new kernel. Route get also works
in this setup. dhclient hangs as messages for interface address
changes with old version are not generated.
OK claudio@
|
|
miod@ cannot find two boards using the same media.
With precious punctuation review from guenther@, thanks!
ok deraadt@, henning@
|
|
|
|
always in the first mbuf of an mbuf chain.
Thanks to henning@ and bluhm@ for their work on checksums at b2k13,
which allowed this fix to be very straightforward compared to earlier
versions.
help/feedback bluhm@ henning@
OK henning@ naddy@
|
|
|
|
global variables to in6.h.
ok deraadt@
|
|
One worrying bit is in icmp6.h where some htols() and htonl() are
added, which may affect compatibility down the line. This component
can be reverted if issues show up. Ports tree greps indicate no issue.
ok claudio mpi etc
|
|
obviously only used in the kernel) behind #ifdef _KERNEL
This is a more substantial change than the others commited minutes ago,
so it is seperate. More structs get hidden.
ok various
|
|
stack (factoid: by a bunch of people in my living room), some compatibility
#define's were created to shim incompatible inpcb access methods. There
was an understanding they would eventually be removed. Since they are
error prone, and 1999 is a long time ago, now they die.
ok mikeb claudio mpi
|
|
|
|
you probably write your own chunks as need be.
ok mpi claudio
|
|
global variables to in.h.
ok mikeb@, deraadt@
|
|
|
|
|
|
making the code the same as netinet4 along the way.
ok bluhm phessler
|
|
Mostly mechanical, setting and passing the rdomain and rtable correctly.
Not yet enabled.
Lots of help and hints from claudio and bluhm
OK claudio@, bluhm@
|
|
While there fix some white space errors. No functional change.
OK claudio@ phessler@
|
|
cksum needs to be 0'd before, pf does that now (just like in the tcp/udp
case) and nothing else uses the icmp "offloading" yet.
with & ok bluhm
|
|
Still some important missing pieces, and this is not yet enabled.
OK bluhm@
|
|
they have found the interface address, so we can get rid of the
additional variable ia_if. No functional change.
OK mpi@ phessler@
|
|
|
|
already there, just compute it - it's dirt cheap. since that happens
very late in ip_output, the rest of the stack doesn't have to care about
checksums at all any more, if something needs to be checksummed, just
set the flag on the pkthdr mbuf to indicate so.
stop pre-computing the pseudo header checksum and incrementally updating it
in the tcp and udp stacks.
ok lteo florian
|