The NetBSD Project

CVS log for src/sys/external/bsd/ipf/netinet/fil.c

[BACK] Up to [cvs.NetBSD.org] / src / sys / external / bsd / ipf / netinet

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.37 / (download) - annotate - [select for diffs], Sat Jun 24 05:16:15 2023 UTC (8 months ago) by msaitoh
Branch: MAIN
CVS Tags: thorpej-ifq-base, thorpej-ifq, thorpej-altq-separation-base, thorpej-altq-separation, HEAD
Changes since 1.36: +3 -3 lines
Diff to previous 1.36 (colored)

Fix typo in comment.

Revision 1.36 / (download) - annotate - [select for diffs], Fri Feb 3 19:01:08 2023 UTC (12 months, 3 weeks ago) by christos
Branch: MAIN
Changes since 1.35: +13 -3 lines
Diff to previous 1.35 (colored)

Fix use after free on packet with broken lengths

Under the scenario with a packet with length of 67 bytes, a header length
using the default of 20 bytes and a TCP data offset (th_off) of 48 will
cause m_pullup() to fail to make sure bytes are arranged contiguously.
m_pullup() will free the mbuf chain and return a null. ipfilter stores
the resultant mbuf address (or the resulting NULL) in its fr_info_t
structure. Unfortunately the erroneous packet is not flagged for drop.
From FreeBSD via CY Schubert; originally reported by: Robert Morris
<rtm at lcs.mit.edu>

Revision 1.35 / (download) - annotate - [select for diffs], Sun Dec 5 07:28:20 2021 UTC (2 years, 2 months ago) by msaitoh
Branch: MAIN
CVS Tags: netbsd-10-base, netbsd-10-0-RC5, netbsd-10-0-RC4, netbsd-10-0-RC3, netbsd-10-0-RC2, netbsd-10-0-RC1, netbsd-10, bouyer-sunxi-drm-base, bouyer-sunxi-drm
Changes since 1.34: +3 -3 lines
Diff to previous 1.34 (colored)

s/recusive/recursive/ in comment.

Revision 1.34 / (download) - annotate - [select for diffs], Sun Dec 5 04:58:59 2021 UTC (2 years, 2 months ago) by msaitoh
Branch: MAIN
Changes since 1.33: +3 -3 lines
Diff to previous 1.33 (colored)

s/imples/implies/ in comment.

Revision 1.32.2.1 / (download) - annotate - [select for diffs], Mon Apr 20 11:29:09 2020 UTC (3 years, 10 months ago) by bouyer
Branch: bouyer-xenpvh
Changes since 1.32: +3 -4 lines
Diff to previous 1.32 (colored) next main 1.33 (colored)

Sync with HEAD

Revision 1.23.2.3 / (download) - annotate - [select for diffs], Mon Apr 13 08:05:00 2020 UTC (3 years, 10 months ago) by martin
Branch: phil-wifi
Changes since 1.23.2.2: +11 -7 lines
Diff to previous 1.23.2.2 (colored) to branchpoint 1.23 (colored) next main 1.24 (colored)

Mostly merge changes from HEAD upto 20200411

Revision 1.29.2.3 / (download) - annotate - [select for diffs], Sun Apr 12 08:39:42 2020 UTC (3 years, 10 months ago) by martin
Branch: netbsd-9
CVS Tags: netbsd-9-3-RELEASE, netbsd-9-2-RELEASE, netbsd-9-1-RELEASE
Changes since 1.29.2.2: +4 -5 lines
Diff to previous 1.29.2.2 (colored) to branchpoint 1.29 (colored) next main 1.30 (colored)

Pull up following revision(s) (requested by christos in ticket #827):

	sys/external/bsd/ipf/netinet/fil.c: revision 1.32
	sys/external/bsd/ipf/netinet/fil.c: revision 1.33
	sys/external/bsd/ipf/netinet/ip_frag.c: revision 1.8

PR/55137: Kouichi Hashikawa: ipfstat -f incorrect output
Fix incorrect byte order.

PR/55137: Kouichi Hashikawa: ipfstat -f incorrect output
- make sure frag is initialized to 0
- initialize ipfr_p field

PR/55149: Kouichi Hashikawa: Get morefrag before we strip it out from off

Revision 1.33 / (download) - annotate - [select for diffs], Thu Apr 9 18:20:40 2020 UTC (3 years, 10 months ago) by christos
Branch: MAIN
CVS Tags: thorpej-i2c-spi-conf2-base, thorpej-i2c-spi-conf2, thorpej-i2c-spi-conf-base, thorpej-i2c-spi-conf, thorpej-futex2-base, thorpej-futex2, thorpej-futex-base, thorpej-futex, thorpej-cfargs2-base, thorpej-cfargs2, thorpej-cfargs-base, thorpej-cfargs, phil-wifi-20200421, phil-wifi-20200411, cjep_sun2x-base1, cjep_sun2x-base, cjep_sun2x, cjep_staticlib_x-base1, cjep_staticlib_x-base, cjep_staticlib_x, bouyer-xenpvh-base2, bouyer-xenpvh-base1
Changes since 1.32: +3 -4 lines
Diff to previous 1.32 (colored)

PR/55149: Kouichi Hashikawa: Get morefrag before we strip it out from off

Revision 1.23.2.2 / (download) - annotate - [select for diffs], Wed Apr 8 14:08:28 2020 UTC (3 years, 10 months ago) by martin
Branch: phil-wifi
Changes since 1.23.2.1: +3 -3 lines
Diff to previous 1.23.2.1 (colored) to branchpoint 1.23 (colored)

Merge changes from current as of 20200406

Revision 1.32 / (download) - annotate - [select for diffs], Sun Apr 5 02:50:27 2020 UTC (3 years, 10 months ago) by christos
Branch: MAIN
CVS Tags: phil-wifi-20200406, bouyer-xenpvh-base
Branch point for: bouyer-xenpvh
Changes since 1.31: +3 -3 lines
Diff to previous 1.31 (colored)

PR/55137: Kouichi Hashikawa: ipfstat -f incorrect output
Fix incorrect byte order.

Revision 1.20.4.4 / (download) - annotate - [select for diffs], Fri Oct 4 11:28:49 2019 UTC (4 years, 4 months ago) by martin
Branch: netbsd-8
CVS Tags: netbsd-8-2-RELEASE
Changes since 1.20.4.3: +4 -2 lines
Diff to previous 1.20.4.3 (colored) to branchpoint 1.20 (colored) next main 1.21 (colored)

Pull up following revision(s) (requested by bouyer in ticket #1399):

	sys/external/bsd/ipf/netinet/fil.c: revision 1.31
	sys/external/bsd/ipf/netinet/ip_fil_netbsd.c: revision 1.32
	sys/external/bsd/ipf/netinet/ip_fil_netbsd.c: revision 1.33

Fix 2 bugs, reported by Edgar Fuss on tech-net@
- pfil_run_hooks() can be called recursively, so we have to
  #define FASTROUTE_RECURSION in fil.c
- ip6_if_output()/nd6_output() will free the mbuf on error, to make sure
  to set *mpp to NULL so the caller won't try to free it again.

fix double space in comment

Revision 1.29.2.2 / (download) - annotate - [select for diffs], Thu Oct 3 17:18:32 2019 UTC (4 years, 4 months ago) by martin
Branch: netbsd-9
CVS Tags: netbsd-9-0-RELEASE, netbsd-9-0-RC2, netbsd-9-0-RC1
Changes since 1.29.2.1: +4 -2 lines
Diff to previous 1.29.2.1 (colored) to branchpoint 1.29 (colored)

Pull up following revision(s) (requested by bouyer in ticket #274):

	sys/external/bsd/ipf/netinet/fil.c: revision 1.31
	sys/external/bsd/ipf/netinet/ip_fil_netbsd.c: revision 1.32
	sys/external/bsd/ipf/netinet/ip_fil_netbsd.c: revision 1.33

Fix 2 bugs, reported by Edgar Fuss on tech-net@
- pfil_run_hooks() can be called recursively, so we have to
  #define FASTROUTE_RECURSION in fil.c
- ip6_if_output()/nd6_output() will free the mbuf on error, to make sure
  to set *mpp to NULL so the caller won't try to free it again.

fix double space in comment

Revision 1.31 / (download) - annotate - [select for diffs], Mon Sep 30 16:58:06 2019 UTC (4 years, 4 months ago) by bouyer
Branch: MAIN
CVS Tags: phil-wifi-20191119, is-mlppp-base, is-mlppp, ad-namecache-base3, ad-namecache-base2, ad-namecache-base1, ad-namecache-base, ad-namecache
Changes since 1.30: +4 -2 lines
Diff to previous 1.30 (colored)

Fix 2 bugs, reported by Edgar Fuon tech-net@
- pfil_run_hooks() can be called recursively, so we have to
  #define FASTROUTE_RECURSION in fil.c
- ip6_if_output()/nd6_output() will free the mbuf on error, to make sure
  to set *mpp to NULL so the caller won't try to free it again.

Revision 1.15.2.4 / (download) - annotate - [select for diffs], Fri Aug 9 19:24:22 2019 UTC (4 years, 6 months ago) by martin
Branch: netbsd-7
Changes since 1.15.2.3: +6 -3 lines
Diff to previous 1.15.2.3 (colored) to branchpoint 1.15 (colored) next main 1.16 (colored)

Pull up following revision(s) (requested by christos in ticket #1701):

	sys/external/bsd/ipf/netinet/fil.c: revision 1.30

PR/54443: Edgar Fu´┐ ipf mistakenly regards UDP packet with checksum field
0xffff as bad

Revision 1.20.4.3 / (download) - annotate - [select for diffs], Fri Aug 9 19:21:04 2019 UTC (4 years, 6 months ago) by martin
Branch: netbsd-8
Changes since 1.20.4.2: +6 -3 lines
Diff to previous 1.20.4.2 (colored) to branchpoint 1.20 (colored)

Pull up following revision(s) (requested by christos in ticket #1331):

	sys/external/bsd/ipf/netinet/fil.c: revision 1.30

PR/54443: Edgar Fu´┐ ipf mistakenly regards UDP packet with checksum field
0xffff as bad

Revision 1.29.2.1 / (download) - annotate - [select for diffs], Fri Aug 9 19:18:47 2019 UTC (4 years, 6 months ago) by martin
Branch: netbsd-9
Changes since 1.29: +6 -3 lines
Diff to previous 1.29 (colored)

Pull up following revision(s) (requested by christos in ticket #40):

	sys/external/bsd/ipf/netinet/fil.c: revision 1.30

PR/54443: Edgar Fu´┐ ipf mistakenly regards UDP packet with checksum field
0xffff as bad

Revision 1.30 / (download) - annotate - [select for diffs], Thu Aug 8 14:38:53 2019 UTC (4 years, 6 months ago) by christos
Branch: MAIN
Changes since 1.29: +6 -3 lines
Diff to previous 1.29 (colored)

PR/54443: Edgar Fu ip mistakenly regards UDP packet with checksum field
0xffff as bad

Revision 1.29 / (download) - annotate - [select for diffs], Fri Jun 28 23:25:12 2019 UTC (4 years, 8 months ago) by christos
Branch: MAIN
CVS Tags: netbsd-9-base
Branch point for: netbsd-9
Changes since 1.28: +28 -24 lines
Diff to previous 1.28 (colored)

Revert previous and do the off == 1 case after we've taken the mask.

Revision 1.28 / (download) - annotate - [select for diffs], Wed Jun 26 15:31:17 2019 UTC (4 years, 8 months ago) by christos
Branch: MAIN
Changes since 1.27: +6 -2 lines
Diff to previous 1.27 (colored)

Conform to RFC 3128 by dropping TCP fragments with offset = 1.
In addition to dropping these fragments, add a DTrace probe to allow
for more detailed monitoring and diagnosis if required.
From FreeBSD r349399, reported vy Cy Schubert

Revision 1.27 / (download) - annotate - [select for diffs], Wed Jun 26 15:26:57 2019 UTC (4 years, 8 months ago) by christos
Branch: MAIN
Changes since 1.26: +2 -7 lines
Diff to previous 1.26 (colored)

Remove fd_local, it is not used, from FreeBSD r349401, reported by Cy Schubert

Revision 1.26 / (download) - annotate - [select for diffs], Wed Jun 26 15:21:52 2019 UTC (4 years, 8 months ago) by christos
Branch: MAIN
Changes since 1.25: +18 -21 lines
Diff to previous 1.25 (colored)

Remove redundant off != 0 check, from FreeBSD r349400, reported by Cy Schubert

Revision 1.23.2.1 / (download) - annotate - [select for diffs], Mon Jun 10 22:08:37 2019 UTC (4 years, 8 months ago) by christos
Branch: phil-wifi
Changes since 1.23: +7 -3 lines
Diff to previous 1.23 (colored)

Sync with HEAD

Revision 1.25 / (download) - annotate - [select for diffs], Mon Feb 4 07:59:01 2019 UTC (5 years ago) by mrg
Branch: MAIN
CVS Tags: phil-wifi-20190609, isaki-audio2-base, isaki-audio2
Changes since 1.24: +3 -2 lines
Diff to previous 1.24 (colored)

add fallthru comments.

Revision 1.20.4.2 / (download) - annotate - [select for diffs], Wed Dec 26 13:18:53 2018 UTC (5 years, 2 months ago) by martin
Branch: netbsd-8
CVS Tags: netbsd-8-1-RELEASE, netbsd-8-1-RC1
Changes since 1.20.4.1: +4 -3 lines
Diff to previous 1.20.4.1 (colored) to branchpoint 1.20 (colored)

Pull up the following, requested by sevan in ticket #1144:

	sys/external/bsd/ipf/netinet/fil.c	1.22

accidently commited to HEAD by mrg with a very misleading log message and
a bunch of unrelated changes - but really:

fix missing braces around a block (detected by newer gcc's indentation
checks).

Revision 1.22.2.2 / (download) - annotate - [select for diffs], Sat Jul 28 04:38:00 2018 UTC (5 years, 7 months ago) by pgoyette
Branch: pgoyette-compat
CVS Tags: pgoyette-compat-merge-20190127
Changes since 1.22.2.1: +6 -3 lines
Diff to previous 1.22.2.1 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

Sync with HEAD

Revision 1.24 / (download) - annotate - [select for diffs], Wed Jul 11 05:25:46 2018 UTC (5 years, 7 months ago) by maxv
Branch: MAIN
CVS Tags: pgoyette-compat-20190127, pgoyette-compat-20190118, pgoyette-compat-1226, pgoyette-compat-1126, pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, pgoyette-compat-0728
Changes since 1.23: +6 -3 lines
Diff to previous 1.23 (colored)

Rename

	ip_undefer_csum  -> in_undefer_cksum
	in_delayed_cksum -> in_undefer_cksum_tcpudp

The two previous names were inconsistent and misleading.

Put the two functions into in_offload.c. Add comments to explain what
we're doing.

The same could be done for IPv6.

Revision 1.22.2.1 / (download) - annotate - [select for diffs], Mon Jun 25 07:26:03 2018 UTC (5 years, 8 months ago) by pgoyette
Branch: pgoyette-compat
Changes since 1.22: +4 -4 lines
Diff to previous 1.22 (colored)

Sync with HEAD

Revision 1.23 / (download) - annotate - [select for diffs], Sun Jun 3 10:37:23 2018 UTC (5 years, 8 months ago) by maxv
Branch: MAIN
CVS Tags: phil-wifi-base, pgoyette-compat-0625
Branch point for: phil-wifi
Changes since 1.22: +4 -4 lines
Diff to previous 1.22 (colored)

Constify a bunch of global varialbes under ipf/ so that they land in
.rodata (3472 bytes).

Also, remove ipf_tuneables[], unused.

Revision 1.22 / (download) - annotate - [select for diffs], Sun Feb 4 08:19:42 2018 UTC (6 years ago) by mrg
Branch: MAIN
CVS Tags: pgoyette-compat-base, pgoyette-compat-0521, pgoyette-compat-0502, pgoyette-compat-0422, pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315
Branch point for: pgoyette-compat
Changes since 1.21: +4 -3 lines
Diff to previous 1.21 (colored)

apply __attribute__((__used__)) for rcsid, etc.

Revision 1.5.2.4 / (download) - annotate - [select for diffs], Sun Dec 3 11:38:02 2017 UTC (6 years, 2 months ago) by jdolecek
Branch: tls-maxphys
Changes since 1.5.2.3: +82 -20 lines
Diff to previous 1.5.2.3 (colored) next main 1.6 (colored)

update from HEAD

Revision 1.20.4.1 / (download) - annotate - [select for diffs], Sat Sep 23 17:28:41 2017 UTC (6 years, 5 months ago) by snj
Branch: netbsd-8
CVS Tags: netbsd-8-0-RELEASE, netbsd-8-0-RC2, netbsd-8-0-RC1, matt-nb8-mediatek-base, matt-nb8-mediatek
Changes since 1.20: +3 -3 lines
Diff to previous 1.20 (colored)

Pull up following revision(s) (requested by christos in ticket #283):
	sys/external/bsd/ipf/netinet/fil.c: revision 1.21
Revert changing the byte order of fi->fi_addr. It is already correct. From
Timo Buhrmester

Revision 1.21 / (download) - annotate - [select for diffs], Tue Sep 5 11:12:32 2017 UTC (6 years, 5 months ago) by christos
Branch: MAIN
CVS Tags: tls-maxphys-base-20171202
Changes since 1.20: +3 -3 lines
Diff to previous 1.20 (colored)

Revert changing the byte order of fi->fi_addr. It is already correct. From
Timo Buhrmester
XXX: pullup 8.

Revision 1.15.4.3 / (download) - annotate - [select for diffs], Mon Aug 28 17:52:34 2017 UTC (6 years, 6 months ago) by skrll
Branch: nick-nhusb
Changes since 1.15.4.2: +3 -3 lines
Diff to previous 1.15.4.2 (colored) to branchpoint 1.15 (colored) next main 1.16 (colored)

Sync with HEAD

Revision 1.15.2.1.2.1 / (download) - annotate - [select for diffs], Fri Aug 25 05:31:36 2017 UTC (6 years, 6 months ago) by snj
Branch: netbsd-7-0
Changes since 1.15.2.1: +3 -3 lines
Diff to previous 1.15.2.1 (colored) next main 1.15.2.2 (colored)

Pull up following revision(s) (requested by mrg in ticket #1412):
	sys/external/bsd/ipf/netinet/fil.c: revision 1.20
	sys/external/bsd/ipf/netinet/ip_frag.c: revision 1.5
	sys/external/bsd/ipf/netinet/ip_state.c: revision 1.7
Disconnect maintaining fragment state from keeping session state. The user
now must specify keep frags along with keep state to have ipfilter do what
it did before, as documented in ipf.conf.5. (Cy Schubert @ FreeBSD)
--
Free the right fragment (Cy Schubert @ FreeBSD). This will cause use after free
issues and eventually panic.

Revision 1.15.2.2.4.1 / (download) - annotate - [select for diffs], Wed Jul 12 18:50:44 2017 UTC (6 years, 7 months ago) by sborrill
Branch: netbsd-7-1
CVS Tags: netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE
Changes since 1.15.2.2: +3 -3 lines
Diff to previous 1.15.2.2 (colored) next main 1.15.2.3 (colored)

Pull up the following revisions(s) (requested by christos in ticket #1412):
	sys/external/bsd/ipf/netinet/fil.c:		revision 1.20
	sys/external/bsd/ipf/netinet/ip_state.c:	revision 1.7
	sys/external/bsd/ipf/netinet/ip_frag.c:		revision 1.5

Disconnect maintaining fragment state from keeping session state. The user
now must specify keep frags along with keep state to have ipfilter do what
it did before, as documented in ipf.conf.5.
Free the right fragment. This will cause use after free issues and eventually
panic.

Revision 1.15.2.3 / (download) - annotate - [select for diffs], Thu Jun 29 12:24:10 2017 UTC (6 years, 8 months ago) by sborrill
Branch: netbsd-7
CVS Tags: netbsd-7-2-RELEASE
Changes since 1.15.2.2: +3 -3 lines
Diff to previous 1.15.2.2 (colored) to branchpoint 1.15 (colored)

Pull up the following revisions(s) (requested by christos in ticket #1412):
	sys/external/bsd/ipf/netinet/fil.c:		revision 1.20
	sys/external/bsd/ipf/netinet/ip_state.c:	revision 1.7
	sys/external/bsd/ipf/netinet/ip_frag.c:		revision 1.5

Disconnect maintaining fragment state from keeping session state. The user
now must specify keep frags along with keep state to have ipfilter do what
it did before, as documented in ipf.conf.5.
Free the right fragment. This will cause use after free issues and eventually
panic.

Revision 1.18.2.2 / (download) - annotate - [select for diffs], Wed Apr 26 02:53:25 2017 UTC (6 years, 10 months ago) by pgoyette
Branch: pgoyette-localcount
Changes since 1.18.2.1: +3 -3 lines
Diff to previous 1.18.2.1 (colored) to branchpoint 1.18 (colored) next main 1.19 (colored)

Sync with HEAD

Revision 1.20 / (download) - annotate - [select for diffs], Sun Apr 23 20:47:22 2017 UTC (6 years, 10 months ago) by christos
Branch: MAIN
CVS Tags: prg-localcount2-base3, prg-localcount2-base2, prg-localcount2-base1, prg-localcount2-base, prg-localcount2, pgoyette-localcount-20170426, perseant-stdc-iso10646-base, perseant-stdc-iso10646, nick-nhusb-base-20170825, netbsd-8-base
Branch point for: netbsd-8
Changes since 1.19: +3 -3 lines
Diff to previous 1.19 (colored)

Disconnect maintaining fragment state from keeping session state. The user
now must specify keep frags along with keep state to have ipfilter do what
it did before, as documented in ipf.conf.5. (Cy Schubert @ FreeBSD)

Revision 1.15.4.2 / (download) - annotate - [select for diffs], Wed Oct 5 20:56:00 2016 UTC (7 years, 4 months ago) by skrll
Branch: nick-nhusb
Changes since 1.15.4.1: +83 -26 lines
Diff to previous 1.15.4.1 (colored) to branchpoint 1.15 (colored)

Sync with HEAD

Revision 1.18.2.1 / (download) - annotate - [select for diffs], Sat Aug 6 00:19:09 2016 UTC (7 years, 6 months ago) by pgoyette
Branch: pgoyette-localcount
Changes since 1.18: +79 -22 lines
Diff to previous 1.18 (colored)

Sync with HEAD

Revision 1.19 / (download) - annotate - [select for diffs], Fri Aug 5 09:06:52 2016 UTC (7 years, 6 months ago) by christos
Branch: MAIN
CVS Tags: pgoyette-localcount-20170320, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, nick-nhusb-base-20170204, nick-nhusb-base-20161204, nick-nhusb-base-20161004, localcount-20160914, jdolecek-ncq-base, jdolecek-ncq, bouyer-socketcan-base1, bouyer-socketcan-base, bouyer-socketcan
Changes since 1.18: +79 -22 lines
Diff to previous 1.18 (colored)

partial sync with FreeBSD

Revision 1.15.2.2 / (download) - annotate - [select for diffs], Fri Apr 29 19:00:40 2016 UTC (7 years, 10 months ago) by snj
Branch: netbsd-7
CVS Tags: netbsd-7-nhusb-base-20170116, netbsd-7-nhusb-base, netbsd-7-nhusb, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-RC1
Branch point for: netbsd-7-1
Changes since 1.15.2.1: +8 -3 lines
Diff to previous 1.15.2.1 (colored) to branchpoint 1.15 (colored)

Pull up following revision(s) (requested by christos in ticket #1152):
	sys/external/bsd/ipf/netinet/fil.c: revision 1.17
Comment out the mutex calls that protect against concurrent configuration
changes and processing. This needs to be done differently since you can't
sleep during interrupt processing.

Revision 1.18 / (download) - annotate - [select for diffs], Mon Apr 4 00:44:06 2016 UTC (7 years, 10 months ago) by christos
Branch: MAIN
CVS Tags: pgoyette-localcount-base, pgoyette-localcount-20160726, nick-nhusb-base-20160907, nick-nhusb-base-20160529, nick-nhusb-base-20160422
Branch point for: pgoyette-localcount
Changes since 1.17: +1 -6 lines
Diff to previous 1.17 (colored)

We don't need this in /current because packet processing does not happen in
an interrupt anymore (pointed out by ozaki@)

Revision 1.17 / (download) - annotate - [select for diffs], Sun Apr 3 15:52:37 2016 UTC (7 years, 10 months ago) by christos
Branch: MAIN
Changes since 1.16: +8 -3 lines
Diff to previous 1.16 (colored)

Comment out the mutex calls that protect against concurrent configuration
changes and processing. This needs to be done differently since you can't
sleep during interrupt processing.

Revision 1.15.2.1 / (download) - annotate - [select for diffs], Fri Apr 10 20:26:46 2015 UTC (8 years, 10 months ago) by snj
Branch: netbsd-7
CVS Tags: netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1, netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE
Branch point for: netbsd-7-0
Changes since 1.15: +7 -2 lines
Diff to previous 1.15 (colored)

Pull up following revision(s) (requested by khorben in ticket #671):
	external/bsd/ipf/dist/lib/interror.c: revision 1.4
	sys/external/bsd/ipf/netinet/fil.c: revision 1.16
Fix for PR kern/48109 (and its duplicate kern/49807)
As provided by Takahiro HAYASHI in PR kern/48109. Additional error
registration in ipf(8) by myself. Changes tested with GENERIC and
XEN3_DOM0. Thanks!

Revision 1.15.4.1 / (download) - annotate - [select for diffs], Mon Apr 6 15:18:18 2015 UTC (8 years, 10 months ago) by skrll
Branch: nick-nhusb
Changes since 1.15: +7 -2 lines
Diff to previous 1.15 (colored)

Sync with HEAD

Revision 1.16 / (download) - annotate - [select for diffs], Thu Apr 2 00:12:58 2015 UTC (8 years, 10 months ago) by khorben
Branch: MAIN
CVS Tags: nick-nhusb-base-20160319, nick-nhusb-base-20151226, nick-nhusb-base-20150921, nick-nhusb-base-20150606, nick-nhusb-base-20150406
Changes since 1.15: +7 -2 lines
Diff to previous 1.15 (colored)

Fix for PR kern/48109 (and its duplicate kern/49807)

As provided by Takahiro HAYASHI in PR kern/48109. Additional error
registration in ipf(8) by myself. Changes tested with GENERIC and
XEN3_DOM0. Thanks!

XXX pull-up netbsd-7

Revision 1.5.2.3 / (download) - annotate - [select for diffs], Wed Aug 20 00:04:24 2014 UTC (9 years, 6 months ago) by tls
Branch: tls-maxphys
Changes since 1.5.2.2: +25 -20 lines
Diff to previous 1.5.2.2 (colored)

Rebase to HEAD as of a few days ago.

Revision 1.14.2.1 / (download) - annotate - [select for diffs], Sun Aug 10 06:55:40 2014 UTC (9 years, 6 months ago) by tls
Branch: tls-earlyentropy
Changes since 1.14: +16 -2 lines
Diff to previous 1.14 (colored) next main 1.15 (colored)

Rebase.

Revision 1.15 / (download) - annotate - [select for diffs], Mon Jun 16 12:38:32 2014 UTC (9 years, 8 months ago) by christos
Branch: MAIN
CVS Tags: tls-maxphys-base, tls-earlyentropy-base, nick-nhusb-base, netbsd-7-base
Branch point for: nick-nhusb, netbsd-7
Changes since 1.14: +16 -2 lines
Diff to previous 1.14 (colored)

Darren Reed: #550 filter rule list corrupted with inserted rules

Revision 1.2.4.5 / (download) - annotate - [select for diffs], Thu May 22 11:40:58 2014 UTC (9 years, 9 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2.4.4: +11 -20 lines
Diff to previous 1.2.4.4 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs.  ("Protocol error: too many arguments")

Revision 1.8.2.1 / (download) - annotate - [select for diffs], Sun May 18 17:46:03 2014 UTC (9 years, 9 months ago) by rmind
Branch: rmind-smpnet
Changes since 1.8: +11 -20 lines
Diff to previous 1.8 (colored) next main 1.9 (colored)

sync with head

Revision 1.14 / (download) - annotate - [select for diffs], Thu Mar 20 20:43:12 2014 UTC (9 years, 11 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base9, rmind-smpnet-nbase, rmind-smpnet-base, riastradh-xf86-video-intel-2-7-1-pre-2-21-15
Branch point for: tls-earlyentropy
Changes since 1.13: +9 -16 lines
Diff to previous 1.13 (colored)

kill sprintf

Revision 1.13 / (download) - annotate - [select for diffs], Wed Nov 27 22:18:06 2013 UTC (10 years, 3 months ago) by christos
Branch: MAIN
CVS Tags: riastradh-drm2-base3
Changes since 1.12: +3 -3 lines
Diff to previous 1.12 (colored)

CID 976267: NULL deref check

Revision 1.12 / (download) - annotate - [select for diffs], Wed Sep 18 23:34:55 2013 UTC (10 years, 5 months ago) by rmind
Branch: MAIN
Changes since 1.11: +2 -8 lines
Diff to previous 1.11 (colored)

Add bpf_filter_ext() to use with BPF COP, restore bpf_filter() as it was
originally to preserve compatibility.  Similarly, add bpf_validate_ext()
which takes bpf_ctx_t.

Revision 1.11 / (download) - annotate - [select for diffs], Thu Sep 12 20:03:10 2013 UTC (10 years, 5 months ago) by martin
Branch: MAIN
Changes since 1.10: +3 -5 lines
Diff to previous 1.10 (colored)

Remove unused variable

Revision 1.10 / (download) - annotate - [select for diffs], Fri Aug 30 15:00:08 2013 UTC (10 years, 6 months ago) by rmind
Branch: MAIN
Changes since 1.9: +4 -3 lines
Diff to previous 1.9 (colored)

bpf_filter: add a custom argument which can be passed to coprocessor routine.

Revision 1.9 / (download) - annotate - [select for diffs], Thu Aug 29 14:25:40 2013 UTC (10 years, 6 months ago) by rmind
Branch: MAIN
Changes since 1.8: +7 -2 lines
Diff to previous 1.8 (colored)

Implement BPF_COP/BPF_COPX instructions in the misc category (BPF_MISC)
which add a capability to call external functions in a predetermined way.

It can be thought as a BPF "coprocessor" -- a generic mechanism to offload
more complex packet inspection operations.  There is no default coprocessor
and this functionality is not targeted to the /dev/bpf.  This is primarily
targeted to the kernel subsystems, therefore there is no way to set a custom
coprocessor at the userlevel.

Discussed on: tech-net@
OK: core@

Revision 1.5.2.2 / (download) - annotate - [select for diffs], Mon Feb 25 00:29:44 2013 UTC (11 years ago) by tls
Branch: tls-maxphys
Changes since 1.5.2.1: +7 -6 lines
Diff to previous 1.5.2.1 (colored)

resync with head

Revision 1.2.4.4 / (download) - annotate - [select for diffs], Wed Jan 23 00:06:17 2013 UTC (11 years, 1 month ago) by yamt
Branch: yamt-pagecache
CVS Tags: yamt-pagecache-tag8
Changes since 1.2.4.3: +7 -6 lines
Diff to previous 1.2.4.3 (colored) to branchpoint 1.2 (colored)

sync with head

Revision 1.8 / (download) - annotate - [select for diffs], Wed Jan 9 13:23:20 2013 UTC (11 years, 1 month ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base8, riastradh-drm2-base2, riastradh-drm2-base1, riastradh-drm2-base, riastradh-drm2, khorben-n900, agc-symver-base, agc-symver
Branch point for: rmind-smpnet
Changes since 1.7: +3 -2 lines
Diff to previous 1.7 (colored)

Back out my last change, which was a partial fix for hash code computation problems.
Apply Darren's more complete reworking of hash code computation.
Ensure that the struct containing the red-black tree head is properly initialized.
From Geoff Adams

Revision 1.7 / (download) - annotate - [select for diffs], Thu Dec 20 21:42:27 2012 UTC (11 years, 2 months ago) by christos
Branch: MAIN
Changes since 1.6: +6 -6 lines
Diff to previous 1.6 (colored)

- Replace the seemingly broken built-in ipf rbtree implementation with ours.
- Fix typos in comments
- Fix 2 mutex errors
From Geoff Adams

Revision 1.5.2.1 / (download) - annotate - [select for diffs], Tue Nov 20 03:02:38 2012 UTC (11 years, 3 months ago) by tls
Branch: tls-maxphys
Changes since 1.5: +3 -3 lines
Diff to previous 1.5 (colored)

Resync to 2012-11-19 00:00:00 UTC

Revision 1.2.4.3 / (download) - annotate - [select for diffs], Tue Oct 30 17:22:18 2012 UTC (11 years, 4 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2.4.2: +594 -283 lines
Diff to previous 1.2.4.2 (colored) to branchpoint 1.2 (colored)

sync with head

Revision 1.6 / (download) - annotate - [select for diffs], Tue Oct 9 21:32:54 2012 UTC (11 years, 4 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base7, yamt-pagecache-base6
Changes since 1.5: +3 -3 lines
Diff to previous 1.5 (colored)

remove wrong ntohl (from Aran Clauson)

Revision 1.5 / (download) - annotate - [select for diffs], Sun Jul 22 16:26:56 2012 UTC (11 years, 7 months ago) by darrenr
Branch: MAIN
Branch point for: tls-maxphys
Changes since 1.4: +3 -5 lines
Diff to previous 1.4 (colored)

ansify new function definition

Revision 1.4 / (download) - annotate - [select for diffs], Sun Jul 22 16:13:16 2012 UTC (11 years, 7 months ago) by darrenr
Branch: MAIN
Changes since 1.3: +6 -15 lines
Diff to previous 1.3 (colored)

ansify new functio definitions

Revision 1.3 / (download) - annotate - [select for diffs], Sun Jul 22 14:27:51 2012 UTC (11 years, 7 months ago) by darrenr
Branch: MAIN
Changes since 1.2: +606 -284 lines
Diff to previous 1.2 (colored)

Merge IPFilter 5.1.2 into HEAD

Revision 1.1.1.2 / (download) - annotate - [select for diffs] (vendor branch), Sun Jul 22 13:45:07 2012 UTC (11 years, 7 months ago) by darrenr
Branch: DARRENR
CVS Tags: v5-1-2
Changes since 1.1.1.1: +638 -293 lines
Diff to previous 1.1.1.1 (colored)

Import IPFilter 5.1.2

Revision 1.2.2.2 / (download) - annotate - [select for diffs], Tue Apr 17 19:25:17 2012 UTC (11 years, 10 months ago) by joerg
Branch: jmcneill-usbmp
Changes since 1.2.2.1: +9573 -0 lines
Diff to previous 1.2.2.1 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)

Re-add new ipf on the jmcneill-usbmp branch.

Revision 1.2.4.2 / (download) - annotate - [select for diffs], Tue Apr 17 00:08:15 2012 UTC (11 years, 10 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2.4.1: +9573 -0 lines
Diff to previous 1.2.4.1 (colored) to branchpoint 1.2 (colored)

sync with head

Revision 1.2.4.1, Fri Mar 23 20:39:49 2012 UTC (11 years, 11 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.2: +0 -9573 lines
FILE REMOVED

file fil.c was added on branch yamt-pagecache on 2012-04-17 00:08:15 +0000

Revision 1.2.2.1, Fri Mar 23 20:39:49 2012 UTC (11 years, 11 months ago) by joerg
Branch: jmcneill-usbmp
Changes since 1.2: +0 -9573 lines
FILE REMOVED

file fil.c was added on branch jmcneill-usbmp on 2012-04-17 19:25:17 +0000

Revision 1.2 / (download) - annotate - [select for diffs], Fri Mar 23 20:39:49 2012 UTC (11 years, 11 months ago) by christos
Branch: MAIN
CVS Tags: yamt-pagecache-base5, yamt-pagecache-base4, jmcneill-usbmp-base9, jmcneill-usbmp-base8, jmcneill-usbmp-base10
Branch point for: yamt-pagecache, jmcneill-usbmp
Changes since 1.1: +266 -562 lines
Diff to previous 1.1 (colored)

apply our changes.
- prototypes
- ip_h323_pxy.c is missing from the distribution
- original tar distribution is missing <$>Id values in most files

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Fri Mar 23 20:36:52 2012 UTC (11 years, 11 months ago) by christos
Branch: DARRENR
CVS Tags: v5-1-1
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

import kernel portion of ipfilter 5.1.1

Revision 1.1 / (download) - annotate - [select for diffs], Fri Mar 23 20:36:52 2012 UTC (11 years, 11 months ago) by christos
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>