Up to [cvs.NetBSD.org] / src / sys / netipsec
Request diff between arbitrary revisions
Default branch: MAIN
Current tag: MAIN
Revision 1.29 / (download) - annotate - [select for diffs], Mon Sep 3 16:29:36 2018 UTC (2 months, 1 week ago) by riastradh
CVS Tags: pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, HEAD
Changes since 1.28: +4 -4 lines
Diff to previous 1.28 (unified)
Rename min/max -> uimin/uimax for better honesty. These functions are defined on unsigned int. The generic name min/max should not silently truncate to 32 bits on 64-bit systems. This is purely a name change -- no functional change intended. HOWEVER! Some subsystems have #define min(a, b) ((a) < (b) ? (a) : (b)) #define max(a, b) ((a) > (b) ? (a) : (b)) even though our standard name for that is MIN/MAX. Although these may invite multiple evaluation bugs, these do _not_ cause integer truncation. To avoid `fixing' these cases, I first changed the name in libkern, and then compile-tested every file where min/max occurred in order to confirm that it failed -- and thus confirm that nothing shadowed min/max -- before changing it. I have left a handful of bootloaders that are too annoying to compile-test, and some dead code: cobalt ews4800mips hp300 hppa ia64 luna68k vax acorn32/if_ie.c (not included in any kernels) macppc/if_gm.c (superseded by gem(4)) It should be easy to fix the fallout once identified -- this way of doing things fails safe, and the goal here, after all, is to _avoid_ silent integer truncations, not introduce them. Maybe one day we can reintroduce min/max as type-generic things that never silently truncate. But we should avoid doing that for a while, so that existing code has a chance to be detected by the compiler for conversion to uimin/uimax without changing the semantics until we can properly audit it all. (Who knows, maybe in some cases integer truncation is actually intended!)
Revision 1.28 / (download) - annotate - [select for diffs], Thu May 31 15:34:25 2018 UTC (5 months, 2 weeks ago) by maxv
CVS Tags: phil-wifi-base, phil-wifi, pgoyette-compat-0728, pgoyette-compat-0625
Changes since 1.27: +11 -29 lines
Diff to previous 1.27 (unified)
Clarify, remove superfluous things.
Revision 1.27 / (download) - annotate - [select for diffs], Sat Apr 28 14:39:34 2018 UTC (6 months, 2 weeks ago) by maxv
CVS Tags: pgoyette-compat-0521, pgoyette-compat-0502
Changes since 1.26: +3 -3 lines
Diff to previous 1.26 (unified)
Inline M_EXT_WRITABLE directly, and remove the XXX, there's nothing wrong in the use of !M_READONLY.
Revision 1.26 / (download) - annotate - [select for diffs], Thu Apr 19 08:27:38 2018 UTC (6 months, 3 weeks ago) by maxv
CVS Tags: pgoyette-compat-0422
Changes since 1.25: +3 -3 lines
Diff to previous 1.25 (unified)
Remove extra long file paths from the headers.
Revision 1.25 / (download) - annotate - [select for diffs], Wed Apr 18 17:34:54 2018 UTC (6 months, 3 weeks ago) by maxv
Changes since 1.24: +17 -19 lines
Diff to previous 1.24 (unified)
Remove unused includes, remove misleading comments, and style.
Revision 1.24 / (download) - annotate - [select for diffs], Tue Apr 17 09:06:33 2018 UTC (6 months, 3 weeks ago) by maxv
Changes since 1.23: +10 -6 lines
Diff to previous 1.23 (unified)
Fix a pretty bad mistake, that has always been there. m_adj(m1, -(m1->m_len - roff)); if (m1 != m) m->m_pkthdr.len -= (m1->m_len - roff); This is wrong: m_adj will modify m1->m_len, so we're using a wrong value when manually adjusting m->m_pkthdr.len. Because of that, it is possible to exploit the attack I described in uipc_mbuf.c::rev1.182. The exploit is more complicated, but works 100% reliably.
Revision 1.23 / (download) - annotate - [select for diffs], Tue Apr 17 06:23:30 2018 UTC (6 months, 4 weeks ago) by maxv
Changes since 1.22: +4 -4 lines
Diff to previous 1.22 (unified)
Don't assume M_PKTHDR is set only on the first mbuf of the chain. It should, but it looks like there are several places that can put M_PKTHDR on secondary mbufs (PR/53189), so drop this assumption right now to prevent further bugs. The check is replaced by (m1 != m), which is equivalent to the previous code: we want to modify m->m_pkthdr.len only when 'm' was not passed in m_adj().
Revision 1.22 / (download) - annotate - [select for diffs], Sat Mar 10 17:52:50 2018 UTC (8 months ago) by maxv
CVS Tags: pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315
Changes since 1.21: +6 -2 lines
Diff to previous 1.21 (unified)
Revision 1.21 / (download) - annotate - [select for diffs], Mon Mar 5 12:42:28 2018 UTC (8 months, 1 week ago) by maxv
CVS Tags: pgoyette-compat-base
Branch point for: pgoyette-compat
Changes since 1.20: +7 -11 lines
Diff to previous 1.20 (unified)
Improve stupid check, style, and fix leak (m, not m0).
Revision 1.20 / (download) - annotate - [select for diffs], Mon Feb 26 06:17:01 2018 UTC (8 months, 2 weeks ago) by maxv
Changes since 1.19: +7 -8 lines
Diff to previous 1.19 (unified)
Merge some minor (mostly stylistic) changes from last week.
Revision 1.19 / (download) - annotate - [select for diffs], Wed Feb 14 14:19:53 2018 UTC (8 months, 4 weeks ago) by maxv
Changes since 1.18: +2 -40 lines
Diff to previous 1.18 (unified)
Remove m_checkalignment(), unused. This eliminates a reference to m_getptr().
Revision 1.18 / (download) - annotate - [select for diffs], Thu Feb 8 20:57:41 2018 UTC (9 months ago) by maxv
Changes since 1.17: +2 -4 lines
Diff to previous 1.17 (unified)
Remove unused net_osdep.h include.
Revision 1.17 / (download) - annotate - [select for diffs], Thu Feb 1 17:16:11 2018 UTC (9 months, 1 week ago) by maxv
Changes since 1.16: +6 -6 lines
Diff to previous 1.16 (unified)
Replace ovbcopy -> memmove, same.
Revision 1.16 / (download) - annotate - [select for diffs], Fri May 19 04:34:09 2017 UTC (17 months, 3 weeks ago) by ozaki-r
CVS Tags: tls-maxphys-base-20171202, perseant-stdc-iso10646-base, perseant-stdc-iso10646, nick-nhusb-base-20170825, netbsd-8-base, matt-nb8-mediatek-base, matt-nb8-mediatek
Branch point for: netbsd-8
Changes since 1.15: +10 -9 lines
Diff to previous 1.15 (unified)
Introduce IPSECLOG and replace ipseclog and DPRINTF with it
Revision 1.15 / (download) - annotate - [select for diffs], Wed Apr 19 03:39:14 2017 UTC (18 months, 3 weeks ago) by ozaki-r
CVS Tags: prg-localcount2-base3, prg-localcount2-base2, prg-localcount2-base1, prg-localcount2-base, prg-localcount2, pgoyette-localcount-20170426, bouyer-socketcan-base1
Changes since 1.14: +2 -3 lines
Diff to previous 1.14 (unified)
Retire ipsec_osdep.h We don't need to care other OSes (FreeBSD) anymore. Some macros are alive in ipsec_private.h.
Revision 1.14 / (download) - annotate - [select for diffs], Tue Apr 18 05:26:42 2017 UTC (18 months, 3 weeks ago) by ozaki-r
Changes since 1.13: +8 -8 lines
Diff to previous 1.13 (unified)
Convert IPSEC_ASSERT to KASSERT or KASSERTMSG IPSEC_ASSERT just discarded specified message...
Revision 1.13 / (download) - annotate - [select for diffs], Tue Apr 18 05:25:32 2017 UTC (18 months, 3 weeks ago) by ozaki-r
Changes since 1.12: +2 -6 lines
Diff to previous 1.12 (unified)
Remove __FreeBSD__ and __NetBSD__ switches No functional changes (except for a debug printf). Note that there remain some __FreeBSD__ for sysctl knobs which counerparts to NetBSD don't exist. And ipsec_osdep.h isn't touched yet; tidying it up requires actual code changes.
Revision 1.12 / (download) - annotate - [select for diffs], Mon May 16 10:05:23 2011 UTC (7 years, 6 months ago) by drochner
CVS Tags: yamt-pagecache-tag8, yamt-pagecache-base9, yamt-pagecache-base8, yamt-pagecache-base7, yamt-pagecache-base6, yamt-pagecache-base5, yamt-pagecache-base4, yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base, yamt-pagecache, tls-maxphys-base, tls-earlyentropy-base, tls-earlyentropy, rmind-uvmplock-nbase, rmind-uvmplock-base, rmind-smpnet-nbase, rmind-smpnet-base, rmind-smpnet, riastradh-xf86-video-intel-2-7-1-pre-2-21-15, riastradh-drm2-base3, riastradh-drm2-base2, riastradh-drm2-base1, riastradh-drm2-base, riastradh-drm2, pgoyette-localcount-base, pgoyette-localcount-20170320, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, pgoyette-localcount-20160726, nick-nhusb-base-20170204, nick-nhusb-base-20161204, nick-nhusb-base-20161004, nick-nhusb-base-20160907, nick-nhusb-base-20160529, nick-nhusb-base-20160422, nick-nhusb-base-20160319, nick-nhusb-base-20151226, nick-nhusb-base-20150921, nick-nhusb-base-20150606, nick-nhusb-base-20150406, nick-nhusb-base, netbsd-7-nhusb-base-20170116, netbsd-7-nhusb-base, netbsd-7-nhusb, netbsd-7-base, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-RC1, netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE, netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1, netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE, netbsd-6-base, netbsd-6-1-RELEASE, netbsd-6-1-RC4, netbsd-6-1-RC3, netbsd-6-1-RC2, netbsd-6-1-RC1, netbsd-6-1-5-RELEASE, netbsd-6-1-4-RELEASE, netbsd-6-1-3-RELEASE, netbsd-6-1-2-RELEASE, netbsd-6-1-1-RELEASE, netbsd-6-0-RELEASE, netbsd-6-0-RC2, netbsd-6-0-RC1, netbsd-6-0-6-RELEASE, netbsd-6-0-5-RELEASE, netbsd-6-0-4-RELEASE, netbsd-6-0-3-RELEASE, netbsd-6-0-2-RELEASE, netbsd-6-0-1-RELEASE, matt-nb6-plus-nbase, matt-nb6-plus-base, matt-nb6-plus, localcount-20160914, khorben-n900, jmcneill-usbmp-pre-base2, jmcneill-usbmp-base9, jmcneill-usbmp-base8, jmcneill-usbmp-base7, jmcneill-usbmp-base6, jmcneill-usbmp-base5, jmcneill-usbmp-base4, jmcneill-usbmp-base3, jmcneill-usbmp-base2, jmcneill-usbmp-base10, jmcneill-usbmp-base, jmcneill-usbmp, jmcneill-audiomp3-base, jmcneill-audiomp3, jdolecek-ncq-base, jdolecek-ncq, cherry-xenmp-base, cherry-xenmp, bouyer-socketcan-base, agc-symver-base, agc-symver
Branch point for: tls-maxphys, pgoyette-localcount, nick-nhusb, netbsd-7-1, netbsd-7-0, netbsd-7, netbsd-6-1, netbsd-6-0, netbsd-6, bouyer-socketcan
Changes since 1.11: +2 -4 lines
Diff to previous 1.11 (unified)
remove redundant declaration
Revision 1.11 / (download) - annotate - [select for diffs], Wed Apr 23 06:09:05 2008 UTC (10 years, 6 months ago) by thorpej
CVS Tags: yamt-pf42-base4, yamt-pf42-base3, yamt-pf42-base2, yamt-nfs-mp-base9, yamt-nfs-mp-base8, yamt-nfs-mp-base7, yamt-nfs-mp-base6, yamt-nfs-mp-base5, yamt-nfs-mp-base4, yamt-nfs-mp-base3, yamt-nfs-mp-base2, yamt-nfs-mp-base11, yamt-nfs-mp-base10, yamt-nfs-mp-base, yamt-nfs-mp, wrstuden-revivesa-base-4, wrstuden-revivesa-base-3, wrstuden-revivesa-base-2, wrstuden-revivesa-base-1, wrstuden-revivesa-base, wrstuden-revivesa, uebayasi-xip-base4, uebayasi-xip-base3, uebayasi-xip-base2, uebayasi-xip-base1, uebayasi-xip-base, uebayasi-xip, simonb-wapbl-nbase, simonb-wapbl-base, simonb-wapbl, nick-hppapmap-base4, nick-hppapmap-base3, nick-hppapmap-base2, nick-hppapmap-base, nick-hppapmap, netbsd-5-base, netbsd-5-2-RELEASE, netbsd-5-2-RC1, netbsd-5-2-3-RELEASE, netbsd-5-2-2-RELEASE, netbsd-5-2-1-RELEASE, netbsd-5-2, netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-1-5-RELEASE, netbsd-5-1-4-RELEASE, netbsd-5-1-3-RELEASE, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-1, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-RC2, netbsd-5-0-RC1, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, netbsd-5-0, netbsd-5, mjf-devfs2-base, matt-premerge-20091211, matt-nb5-pq3-base, matt-nb5-pq3, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb5-mips64, matt-nb4-mips64-k7-u2a-k9b, matt-mips64-premerge-20101231, matt-mips64-base2, jymxensuspend-base, jym-xensuspend-nbase, jym-xensuspend-base, jym-xensuspend, jruoho-x86intr-base, hpcarm-cleanup-nbase, haad-nbase2, haad-dm-base2, haad-dm-base1, haad-dm-base, haad-dm, bouyer-quota2-nbase, bouyer-quota2-base, bouyer-quota2, ad-audiomp2-base, ad-audiomp2
Branch point for: rmind-uvmplock, jruoho-x86intr
Changes since 1.10: +10 -9 lines
Diff to previous 1.10 (unified)
Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> and netstat_sysctl().
Revision 1.10 / (download) - annotate - [select for diffs], Fri Dec 14 20:55:22 2007 UTC (10 years, 11 months ago) by seanb
CVS Tags: yamt-pf42-baseX, yamt-pf42-base, yamt-lazymbuf-base15, yamt-lazymbuf-base14, vmlocking2-base3, nick-net80211-sync-base, nick-net80211-sync, mjf-devfs-base, matt-armv6-nbase, matt-armv6-base, keiichi-mipv6-nbase, keiichi-mipv6-base, keiichi-mipv6, hpcarm-cleanup-base, bouyer-xeni386-nbase, bouyer-xeni386-base, ad-socklock-base1
Branch point for: yamt-pf42, mjf-devfs2
Changes since 1.9: +56 -55 lines
Diff to previous 1.9 (unified)
- Remove remain <= MHLEN restriction in m_makespace() PR:30124
Revision 1.9 / (download) - annotate - [select for diffs], Sun Mar 4 19:54:48 2007 UTC (11 years, 8 months ago) by degroote
CVS Tags: yamt-x86pmap-base4, yamt-x86pmap-base3, yamt-x86pmap-base2, yamt-x86pmap-base, yamt-x86pmap, yamt-kmem-base3, yamt-kmem-base2, yamt-kmem-base, yamt-kmem, yamt-idlelwp-base8, vmlocking2-base2, vmlocking2-base1, vmlocking-nbase, vmlocking-base, vmlocking, thorpej-atomic-base, thorpej-atomic, reinoud-bufcleanup-nbase, reinoud-bufcleanup-base, reinoud-bufcleanup, nick-csl-alignment-base5, nick-csl-alignment-base, nick-csl-alignment, mjf-ufs-trans-base, mjf-ufs-trans, mjf-devfs, matt-mips64-base, matt-mips64, matt-armv6-prevmlocking, jmcneill-pm-base, jmcneill-pm, jmcneill-base, hpcarm-cleanup, cube-autoconf-base, cube-autoconf, bouyer-xenamd64-base2, bouyer-xenamd64-base, bouyer-xenamd64
Branch point for: vmlocking2, matt-armv6, bouyer-xeni386
Changes since 1.8: +16 -16 lines
Diff to previous 1.8 (unified)
Fix fallout from caddr_t changes
Revision 1.8 / (download) - annotate - [select for diffs], Sun Mar 4 06:03:29 2007 UTC (11 years, 8 months ago) by christos
Changes since 1.7: +21 -21 lines
Diff to previous 1.7 (unified)
Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.
Revision 1.7 / (download) - annotate - [select for diffs], Sun Dec 11 12:25:05 2005 UTC (12 years, 11 months ago) by christos
CVS Tags: yamt-uio_vmspace-base5, yamt-uio_vmspace, yamt-splraiseipl-base5, yamt-splraiseipl-base4, yamt-splraiseipl-base3, yamt-splraiseipl-base2, yamt-splraiseipl-base, yamt-splraiseipl, yamt-pdpolicy-base9, yamt-pdpolicy-base8, yamt-pdpolicy-base7, yamt-pdpolicy-base6, yamt-pdpolicy-base5, yamt-pdpolicy-base4, yamt-pdpolicy-base3, yamt-pdpolicy-base2, yamt-pdpolicy-base, yamt-pdpolicy, wrstuden-fixsa-base-1, simonb-timecounters-base, simonb-timecounters, simonb-timcounters-final, rpaulo-netinet-merge-pcb-base, rpaulo-netinet-merge-pcb, post-newlock2-merge, peter-altq-base, peter-altq, newlock2-nbase, newlock2-base, newlock2, netbsd-4-base, netbsd-4-0-RELEASE, netbsd-4-0-RC5, netbsd-4-0-RC4, netbsd-4-0-RC3, netbsd-4-0-RC2, netbsd-4-0-RC1, matt-nb4-arm-base, matt-nb4-arm, gdamore-uart-base, gdamore-uart, elad-kernelauth-base, elad-kernelauth, chap-midi-nbase, chap-midi-base, chap-midi, ad-audiomp-base, ad-audiomp, abandoned-netbsd-4-base, abandoned-netbsd-4
Branch point for: yamt-idlelwp, wrstuden-fixsa, netbsd-4-0, netbsd-4
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (unified)
Revision 1.6 / (download) - annotate - [select for diffs], Sat Feb 26 22:45:13 2005 UTC (13 years, 8 months ago) by perry
CVS Tags: yamt-vop-base3, yamt-vop-base2, yamt-vop-base, yamt-vop, yamt-readahead-pervnode, yamt-readahead-perfile, yamt-readahead-base3, yamt-readahead-base2, yamt-readahead-base, yamt-readahead, yamt-km-base4, yamt-km-base3, thorpej-vnode-attr-base, thorpej-vnode-attr, netbsd-3-base, netbsd-3-1-RELEASE, netbsd-3-1-RC4, netbsd-3-1-RC3, netbsd-3-1-RC2, netbsd-3-1-RC1, netbsd-3-1-1-RELEASE, netbsd-3-1, netbsd-3-0-RELEASE, netbsd-3-0-RC6, netbsd-3-0-RC5, netbsd-3-0-RC4, netbsd-3-0-RC3, netbsd-3-0-RC2, netbsd-3-0-RC1, netbsd-3-0-3-RELEASE, netbsd-3-0-2-RELEASE, netbsd-3-0-1-RELEASE, netbsd-3-0, netbsd-3, ktrace-lwp-base, kent-audio2-base
Branch point for: yamt-lazymbuf
Changes since 1.5: +4 -4 lines
Diff to previous 1.5 (unified)
nuke trailing whitespace
Revision 1.5 / (download) - annotate - [select for diffs], Fri May 7 00:55:15 2004 UTC (14 years, 6 months ago) by jonathan
CVS Tags: yamt-km-base2, yamt-km-base, kent-audio1-beforemerge, kent-audio1-base, kent-audio1
Branch point for: yamt-km, ktrace-lwp, kent-audio2
Changes since 1.4: +3 -2 lines
Diff to previous 1.4 (unified)
Redo net.inet.* sysctl subtree for fast-ipsec from scratch. Attach FAST-IPSEC statistics with 64-bit counters to new sysctl MIB. Rework netstat to show FAST_IPSEC statistics, via sysctl, for netstat -p ipsec. New kernel files: sys/netipsec/Makefile (new file; install *_var.h includes) sys/netipsec/ipsec_var.h (new 64-bit mib counter struct) Changed kernel files: sys/Makefile (recurse into sys/netipsec/) sys/netinet/in.h (fake IP_PROTO name for fast_ipsec sysctl subtree.) sys/netipsec/ipsec.h (minimal userspace inclusion) sys/netipsec/ipsec_osdep.h (minimal userspace inclusion) sys/netipsec/ipsec_netbsd.c (redo sysctl subtree from scratch) sys/netipsec/key*.c (fix broken net.key subtree) sys/netipsec/ah_var.h (increase all counters to 64 bits) sys/netipsec/esp_var.h (increase all counters to 64 bits) sys/netipsec/ipip_var.h (increase all counters to 64 bits) sys/netipsec/ipcomp_var.h (increase all counters to 64 bits) sys/netipsec/ipsec.c (add #include netipsec/ipsec_var.h) sys/netipsec/ipsec_mbuf.c (add #include netipsec/ipsec_var.h) sys/netipsec/ipsec_output.c (add #include netipsec/ipsec_var.h) sys/netinet/raw_ip.c (add #include netipsec/ipsec_var.h) sys/netinet/tcp_input.c (add #include netipsec/ipsec_var.h) sys/netinet/udp_usrreq.c (add #include netipsec/ipsec_var.h) Changes to usr.bin/netstat to print the new fast-ipsec sysctl tree for "netstat -s -p ipsec": New file: usr.bin/netstat/fast_ipsec.c (print fast-ipsec counters) Changed files: usr.bin/netstat/Makefile (add fast_ipsec.c) usr.bin/netstat/netstat.h (declarations for fast_ipsec.c) usr.bin/netstat/main.c (call KAME-vs-fast-ipsec dispatcher)
Revision 1.4 / (download) - annotate - [select for diffs], Mon Mar 1 23:24:10 2004 UTC (14 years, 8 months ago) by thorpej
CVS Tags: netbsd-2-0-base
Branch point for: netbsd-2-0
Changes since 1.3: +29 -3 lines
Diff to previous 1.3 (unified)
Add missing copyright notice (FreeBSD rev. 126.96.36.199).
Revision 1.3 / (download) - annotate - [select for diffs], Wed Aug 20 22:33:40 2003 UTC (15 years, 2 months ago) by jonathan
Changes since 1.2: +4 -2 lines
Diff to previous 1.2 (unified)
opt_inet6.h is FreeBSD-specific, so wrap it with #ifdef __FreeBSD__/#endif.
Revision 1.2 / (download) - annotate - [select for diffs], Wed Aug 13 20:13:59 2003 UTC (15 years, 3 months ago) by jonathan
Changes since 1.1: +1 -1 lines
Diff to previous 1.1 (unified)
Make sure one (potentially) overlapping copy is safe.
Revision 1.1 / (download) - annotate - [select for diffs], Wed Aug 13 20:06:50 2003 UTC (15 years, 3 months ago) by jonathan
Initial import of Sam Leffler's `Fast-IPsec' from FreeBSD 4. Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.