Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-01-07 | remove the altq classifier code which is replaced by pf and no longer used. | Kenjiro Cho | |
ok henning@, deraadt@ | |||
2002-12-09 | From Andrushock, s/sucess/success/g | Todd C. Miller | |
2002-11-19 | Use queue.h macros | Jason Wright | |
2002-11-12 | Check for undersized IP header, found by jbm@, ok angelos@ | Daniel Hartmeier | |
2002-11-07 | Check for invalid payload lengths also for NULL enc. markus@, angelos@ ok. | Hakan Olsson | |
2002-11-06 | fix ecn breakage. | Kenjiro Cho | |
this part of falling back to non-ecn on timeout slipped during merge from KAME. ok @art report to bugs@ by Han Boetes and Otto Moerbeek | |||
2002-10-15 | Note that this is based on RFC3378. | Jason Wright | |
2002-10-10 | Missing m_pullup() and mbuf corruption. This potentially caused | Daniel Hartmeier | |
panic: m_copym0: m == 0 and not COPYALL and/or panic: m_copydata: null muf on bridges running pf with scrubbing enabled. Bug report, test vector and confirmation by Jon Morby. ok jason@, jasoni@ | |||
2002-10-04 | Prevent packet processing while tweaking address and routing tables. | Henric Jungheim | |
ok art@ | |||
2002-09-12 | Fix max packet size check. Noticed by <j@pureftpd.org>. jjbg@ ok. | Hakan Olsson | |
2002-09-11 | fix pointer signedness mixup. | Jun-ichiro itojun Hagino | |
2002-09-11 | KNF - return is not a function. sync w/kame | Jun-ichiro itojun Hagino | |
2002-09-05 | never append data to shutdown(s, SHUT_RD) socket. can lead to unexpected | Jun-ichiro itojun Hagino | |
kernel resource consumption. NetBSD PR 18185 | |||
2002-09-04 | Ghosts from the past (fixed 1.65, reverted 1.66) rediscovered by | Daniel Hartmeier | |
Henric Jungheim. ok deraadt@ | |||
2002-09-04 | pass struct proc * down to in6_pcbsetport | Jun-ichiro itojun Hagino | |
2002-08-28 | Fix a problem where passing NULL as a pointer with varargs does not promote | Per Fogelstrom | |
NULL to full 64 bits on a 64 bit address system. Soultion is to add a (void *) cast before NULL. This makes a 64 bit MIPS kernel work and will probably help future 64 bit ports as well. OK from art@ | |||
2002-08-19 | committed by mistake - i'm still working on these | Jun-ichiro itojun Hagino | |
2002-08-19 | be consistent with other KAME source, use "ip6" for ip6_hdr, not "ipv6". | Jun-ichiro itojun Hagino | |
2002-08-19 | merge in IPv6 deprecated address handling from KAME. | Jun-ichiro itojun Hagino | |
2002-08-16 | pass unprocessed GRE packet to raw ip socket. binkertn@ ok | Jun-ichiro itojun Hagino | |
2002-08-08 | redo socketbuf speedup. | Niels Provos | |
2002-08-08 | backout the tree break. ok pb@, art@ | Todd T. Fries | |
2002-08-08 | socket buf speedup from thorpej@netbsd, okay art@ ericj@: | Niels Provos | |
Make insertion of data into socket buffers O(C): * Keep pointers to the first and last mbufs of the last record in the socket buffer. * Use the sb_lastrecord pointer in the sbappend*() family of functions to avoid traversing the packet chain to find the last record. * Add a new sbappend_stream() function for stream protocols which guarantee that there will never be more than one record in the socket buffer. This function uses the sb_mbtail pointer to perform the data insertion. Make TCP use sbappend_stream(). On a profiling run, this makes sbappend of a TCP transmission using a 1M socket buffer go from 50% of the time to .02% of the time. Thanks to Bill Sommerfeld and YAMAMOTO Takashi for their debugging assistance! | |||
2002-07-31 | remove $Id$ | Jun-ichiro itojun Hagino | |
2002-07-30 | Be sure to check the integrity verifier for packets that didn't have it done | Jason Wright | |
in hardware; from angelos | |||
2002-07-29 | be friendly with gcc-3.1.1 -O2, which takes advantage of ANSI C | Jun-ichiro itojun Hagino | |
pointer aliasing rule (gcc optimization/7427). from tsubai@netbsd, sync w/kame | |||
2002-07-12 | - Add a flags argument to dohooks. | Artur Grabowski | |
The flag can be either HOOK_REMOVE or HOOK_REMOVE|HOOK_FREE. o HOOK_REMOVE removes the hook from the list before executing it. o HOOK_FREE frees the hook after that. - Let dostartuphooks use HOOK_REMOVE|HOOK_FREE so we can reclaim the memory. - Let doshutdownhooks use HOOK_REMOVE so that when some shutdown hook panics (they do that all the #@$%! time these days) we don't loop for ever. Don't HOOK_FREE, it doesn't matter and I don't want to add another possible panic condition for shutdown hooks. - Actually free the pointer we're throwing away in hook_disestablish (I wonder how much memory this has leaked over the years). | |||
2002-07-05 | Free crp_opaque only after we've determined we're not going to | Angelos D. Keromytis | |
re-submit it. From sam@errno.com | |||
2002-07-05 | Also, return EAFNOSUPPORT instead of ENOBUFS. Both this and the | Angelos D. Keromytis | |
previous commit where noted by sam@errno.com | |||
2002-07-05 | Bump ipips_family in ipipstat in all cases where EAFNOSUPPORT is returned. | Angelos D. Keromytis | |
2002-07-03 | Change all variables definitions (int foo) in sys/sys/*.h to variable | Miod Vallat | |
declarations (extern int foo), and compensate in the appropriate locations. | |||
2002-07-01 | Move mtod() after the m_pullup() --- noted by sam@errno.com (who seems | Angelos D. Keromytis | |
to be going over the IPsec code with a magnifying glass) | |||
2002-06-28 | Fix usage counter for IPCOMP --- sam@errno.com | Angelos D. Keromytis | |
2002-06-28 | undo recent changes; they still crash for people (dhclient this time). | Theo de Raadt | |
This is a bullshit process. Test your shit before you toss it into the tree. | |||
2002-06-26 | Check for associated socket. | Angelos D. Keromytis | |
2002-06-26 | A bit more paranoid. | Angelos D. Keromytis | |
2002-06-26 | Update correct statistic if m_inject() fails --- from sam@errno.com | Angelos D. Keromytis | |
2002-06-25 | Forgot variable. | Angelos D. Keromytis | |
2002-06-25 | Ifdef the function proto as well. | Angelos D. Keromytis | |
2002-06-25 | Make udp_input() a bit more readable by farming out the IPsec input | Angelos D. Keromytis | |
policy checking to a separate routine. Also, add missing checks for multicast sockets, pointed out by sam@errno.com | |||
2002-06-25 | Handle correctly return values from xf_input methods --- since the | Angelos D. Keromytis | |
return value was ignored anyway, this wasn't a problem so far. From sam@errno.com | |||
2002-06-24 | skip routing table lookup if multicasting/broadcasting and the outgoing | Jun-ichiro itojun Hagino | |
interface is specified by setsockopt. from freebsd4, sync with kame (it makes difference when you run routed with RIPv2 enabled - no need for 224/4 route) | |||
2002-06-20 | minor indent cleanup while reading code | Theo de Raadt | |
2002-06-19 | Remove redundant address family check -- sam@errno.com | Angelos D. Keromytis | |
2002-06-18 | Style. | Angelos D. Keromytis | |
2002-06-18 | KNF | Angelos D. Keromytis | |
2002-06-18 | Initialize mo to NULL, for good measure -- sam@errno.com | Angelos D. Keromytis | |
2002-06-18 | Missing freeing of crp, from sam@errno.com | Angelos D. Keromytis | |
2002-06-18 | Fix double-free. | Angelos D. Keromytis | |
2002-06-18 | Same as with ip_ah.c (fix unreachable reference-after-free) | Angelos D. Keromytis | |