summaryrefslogtreecommitdiff
path: root/sys/netinet
AgeCommit message (Expand)Author
2022-02-25Reported-by: syzbot+1b5b209ce506db4d411d@syzkaller.appspotmail.comPhilip Guenther
2022-02-25Move pr_attach and pr_detach to a new structure pr_usrreqs that canPhilip Guenther
2022-02-22Delete unnecessary #includes of <netinet6/ip6protosw.h>: some neverPhilip Guenther
2022-02-22Delete unnecessary #includes of <sys/domain.h> and/or <sys/protosw.h>Philip Guenther
2022-02-16rewrite vxlan to better fit the current kernel infrastructure.David Gwynne
2022-02-01When a struct ipovly needs to be computed and checksummed in in4_cksum(),Miod Vallat
2022-01-25Capture a repeated pattern into sysctl_securelevel_int functionGreg Steuck
2022-01-23Define all TCP TF_ flags as unsigned numbers. They are stored inAlexander Bluhm
2022-01-20Shifting signed integers left by 31 is undefined behavior in C.Alexander Bluhm
2022-01-04Add `ipsec_flows_mtx' mutex(9) to protect `ipsp_ids_*' list andYASUOKA Masahiko
2022-01-02spellingJonathan Gray
2021-12-23Remove unused variables and assignments in ah and esp output.Alexander Bluhm
2021-12-23IPsec is not MP safe yet. To allow forwarding in parallel withoutAlexander Bluhm
2021-12-22Consolidate enc_getif() lookups in IPsec input path to save one lookupTobias Heider
2021-12-20Remove unused variable 'clen'.Tobias Heider
2021-12-20Use per-CPU counters for tunnel descriptor block (TDB) statistics.Vitaliy Makkoveev
2021-12-20Fix function name in panic string.Alexander Bluhm
2021-12-19There are occasions where the walker function in tdb_walk() mightAlexander Bluhm
2021-12-16Fix a tiny race in tdb_delete() between TDBF_DELETED, tdb_unlink()Alexander Bluhm
2021-12-15structure pads can leak uninitialized memory to userland via copyout,Theo de Raadt
2021-12-15Syzkaller found a dereference in igmp_leavegroup() where inm->inm_rtiAlexander Bluhm
2021-12-14Correct value for IPTOS_DSCP_LE since it needs to allow for the preceedingDarren Tucker
2021-12-14To cache lookups, the policy ipo is linked to its SA tdb. ThereAlexander Bluhm
2021-12-11Protect the write access to the TDB flags field with a mutex perAlexander Bluhm
2021-12-08Start documenting the locking strategy of struct tdb fields. NoteAlexander Bluhm
2021-12-07In ipo_tdb the flow contains a reference counted TDB cache. ThisAlexander Bluhm
2021-12-03Add tdb_delete_locked() to replace duplicate tdb deletion code inTobias Heider
2021-12-03Add TDB reference counting to ipsp_spd_lookup(). If an outputAlexander Bluhm
2021-12-02ipsec_common_input_cb() extracted the inner IP header of IPsecAlexander Bluhm
2021-12-02Allow to build kernel without IPSEC or INET6 defines.Alexander Bluhm
2021-12-01Reintroduce the TDBF_DELETED flag. Checking next pointer to figureAlexander Bluhm
2021-12-01Let ipsp_spd_lookup() return an error instead of a TDB. The TDBAlexander Bluhm
2021-11-30Remove unused parameter from ipsp_spd_inp().Alexander Bluhm
2021-11-29The network stack currently uses IPL_SOFTNET. Consistently initializeAlexander Bluhm
2021-11-29Using a void pointer for temporary allocated TDB in pfkeyv2 doesAlexander Bluhm
2021-11-26Put a mutex assert locked into puttdb_locked().Alexander Bluhm
2021-11-26Replace TDBF_DELETED flag with check if tdb was already unlinked.Tobias Heider
2021-11-25move label to fix RAMDISKTheo de Raadt
2021-11-25Implement reference counting for IPsec tdbs. Not all cases areAlexander Bluhm
2021-11-24When sending ICMP packets for IPsec path MTU discovery, the firstAlexander Bluhm
2021-11-22Copy code from ip_forward() to ip6_forward() to fix Path MTU discoveryAlexander Bluhm
2021-11-21Add the new `ipsec_exctdb' ipsec(4) counter to count and expose to theVitaliy Makkoveev
2021-11-21Fix whitespace and long lines.Alexander Bluhm
2021-11-18printing udpencap_port in ddb requires ntohs not ntohl. use better formatStuart Henderson
2021-11-16To debug IPsec and tdb refcounting it is useful to have "show tdb"Alexander Bluhm
2021-11-11Do not call ip_deliver() recursively from IPsec. As there is noAlexander Bluhm
2021-11-08Use plen consistently.Tobias Heider
2021-11-04The authenticator is removed elsewhere.Tobias Heider
2021-11-01In ipsec_common_input_cb() pass mbuf pointer to pf_test() so thatAlexander Bluhm
2021-10-27The crypto layer needs the kernel lock. ah_zeroize() takes it whenAlexander Bluhm