summaryrefslogtreecommitdiff
path: root/sys
AgeCommit message (Expand)Author
2015-12-04Add intr_barrier() just in case...Mark Kettenis
2015-12-04Reduce the stride length of the tables by two and use a single pageMartin Pieuchot
2015-12-04Move the KERNEL_LOCK from rt_match() to rtable_match().Martin Pieuchot
2015-12-04remove PLEDGE_INET granting when using "getpw" in YP environnmentSebastien Marie
2015-12-04Reject input when either the version is wrong or the pad is non-zero;Reyk Floeter
2015-12-04prefix function names like randomid and pmod to keep them out of globalTed Unangst
2015-12-04Grab the KERNEL_LOCK() around bridge_output().Martin Pieuchot
2015-12-04There is no need to grab the KERNEL_LOCK here anymore. After discussion withClaudio Jeker
2015-12-04bridge(4) never outputs packets so set its if_output and if_start to NULL.Martin Pieuchot
2015-12-04Add pledge "dpath", which provides access to mknod(2) and mkfifo(2).Theo de Raadt
2015-12-04add a missing mtx_leave before a panic to give ddb/reboot a betterJonathan Gray
2015-12-04Do not think atomicity is required here. In any case, prepare forTheo de Raadt
2015-12-03mpi@ forgot to commit this. That should unbreak the tree.Claudio Jeker
2015-12-03Get rid of rt_mask() and stop allocating a "struct sockaddr" for everyMartin Pieuchot
2015-12-03deleting ip_insertoptions() prototype, which is no longer neededAlexandr Nedvedicky
2015-12-03ip_send()/ip6_send() allow PF to send response packet in ipsoftnet task.Alexandr Nedvedicky
2015-12-03remove code that's been #ifdef'ed out for 20 yearsBret Lambert
2015-12-03When enqueuing a mbuf chain, take the top instead of the lastAlexander Bluhm
2015-12-03Remove the /usr/share/nls/ exception from pledge(2). The libcAlexander Bluhm
2015-12-03Use SRPL_HEAD() and SRPL_ENTRY() to be consistent with and allow toMartin Pieuchot
2015-12-03add ifdef IPSEC for protoypes; requested by mpi@Markus Friedl
2015-12-03pledge(pf) needs to allow DIOCKILLSRCNODES, used in relayd.Sebastian Benoit
2015-12-03Let the IP27 kernel build with DEBUG.Visa Hankala
2015-12-03factor out ip_input_ipsec_{fwd,ours}_check(); ok mpi@Markus Friedl
2015-12-03Remove broadcast matching from ifa_ifwithaddr(), use in_broadcast() whereVincent Gross
2015-12-03ieee80211com's ic_sup_mcs array is smaller than it used to be because part ofStefan Sperling
2015-12-03ANSIfy function definitionsBret Lambert
2015-12-03Remove unused ``rt_tableid'' field from "struct rtentry".Martin Pieuchot
2015-12-03Store an interface index instead of a pointer in the "struct rtentry".Martin Pieuchot
2015-12-03To avoid that the stack manipules the pf statekeys directly, introduceAlexander Bluhm
2015-12-03Add sizes to most free calls. OK sashan@ tedu@Claudio Jeker
2015-12-03add sizes to some free() calls. ok claudioTed Unangst
2015-12-03rewrite if to be more clear. ok bluhm stspTed Unangst
2015-12-03remove some unused defines. ok mikebTed Unangst
2015-12-03tell the stack myx_start is mpsafe.David Gwynne
2015-12-03Implement etherip(4) driverKazuya Goda
2015-12-03remove nettxintr prototypeDavid Gwynne
2015-12-03rework if_start to allow nics to provide an mpsafe start routine.David Gwynne
2015-12-03rm unused kernel only IPV6_RECVRTHDRDSTOPTS sockopt. ok deraadt sthenTed Unangst
2015-12-03allocate PF tags as M_RTABLE vice M_TEMPBret Lambert
2015-12-03Rework cas_start to check for space on the ring before dequeueing and dropJonathan Matthew
2015-12-03Rename pf_unlink_state() to pf_remove_state() so the name does notAlexander Bluhm
2015-12-03Rewrite the tx handler to just use ifq_dequeue and drop packets thatClaudio Jeker
2015-12-02Move port picking away from in_pcbbind()Vincent Gross
2015-12-02Since we want to print the interface names in the log messages it isClaudio Jeker
2015-12-02More rt_ifp killing. There checks in in_arpinput() to verify that theClaudio Jeker
2015-12-02factor out ip_output_ipsec_{lookup,send}(); with & ok claudio@Markus Friedl
2015-12-02There is no reason for this carp magic in arpresolve. rt->rt_ifp has toClaudio Jeker
2015-12-02rtable_delete() does not use its prio parameter, so delete it.Alexander Bluhm
2015-12-02When destroying an interface, we have to wait until all referencesAlexander Bluhm