Andrey V. Elsukov 3d80e82d60 Fix possible use after free due to security policy deletion. ... When we are passing mbuf to IPSec processing via ipsec[46]_process_packet(), we hold one reference to security policy and release it just after return from this function. But IPSec processing can be deffered and when we release reference to security policy after ipsec[46]_process_packet(), user can delete this security policy from SPDB. And when IPSec processing will be done, xform's callback function will do access to already freed memory. To fix this move KEY_FREESP() into callback function. Now IPSec code will release reference to SP after processing will be finished. Differential Revision: https://reviews.freebsd.org/D2324 No objections from: #network Sponsored by: Yandex LLC		2015-04-27 00:55:56 +00:00
..
amd64	STOS/STOSB/STOSW/STOSD/STOSQ instruction emulation.	2015-04-25 19:02:06 +00:00
arm	Enable root mounting from mmc/sd card.	2015-04-27 00:39:57 +00:00
arm64	Add the null implementation of stack_save and stack_save_td.	2015-04-22 12:24:38 +00:00
boot	Fix the gpio-leds node to match the LEDs on RPI2.	2015-04-23 18:36:36 +00:00
bsm
cam	Extend DA_Q_NO_RC16 to MXUB3* devices.	2015-04-21 22:55:52 +00:00
cddl	Adjust PROF_ARTIFICIAL_FRAMES in the DTrace profile provider on ARM to	2015-04-25 15:43:12 +00:00
compat	Simplify linux_getcwd(), removing code that was longer used.	2015-04-23 08:41:50 +00:00
conf	Move common code from sys/i386/i386/mp_machdep.c and	2015-04-24 16:20:56 +00:00
contrib	Move ALTQ from contrib to net/altq. The ALTQ code is for many years	2015-04-16 20:22:40 +00:00
crypto	In the version of gcc in the FreeBSD tree, this modification was made to	2015-04-16 17:42:52 +00:00
ddb
dev	Don't use ifm_data. It was used only for self checking debug.	2015-04-26 21:31:30 +00:00
fs	Fix the NFS server's handling of a bogus NFSv2 ROOT RPC.	2015-04-25 00:58:24 +00:00
gdb
geom	Move zlib.c from net to libkern.	2015-04-22 14:38:58 +00:00
gnu	The GNU Amlogic DTS files have some errors (e.g. bad register	2015-04-11 08:17:39 +00:00
i386	Move common code from sys/i386/i386/mp_machdep.c and	2015-04-24 16:20:56 +00:00
isa
kern	fd: plug an always overwritten initialization in fdalloc	2015-04-26 17:27:55 +00:00
kgssapi
libkern	Move zlib.c from net to libkern.	2015-04-22 14:38:58 +00:00
mips	Start enabling the available GPIO pins on the Carambola 2.	2015-04-12 00:02:32 +00:00
modules	Rename the kld for oce(4) to if_oce.ko. ifconfig(8) has special knowledge	2015-04-24 14:47:53 +00:00
net	Currently there is no easy way to specify net.isr.maxthreads = all cpus. We need	2015-04-25 16:12:06 +00:00
net80211	iwn, wlan: fix typos	2015-04-10 20:55:17 +00:00
netgraph	Move zlib.c from net to libkern.	2015-04-22 14:38:58 +00:00
netinet	Fix possible use after free due to security policy deletion.	2015-04-27 00:55:56 +00:00
netinet6	Fix possible use after free due to security policy deletion.	2015-04-27 00:55:56 +00:00
netipsec	Fix possible use after free due to security policy deletion.	2015-04-27 00:55:56 +00:00
netnatm
netpfil	Move ALTQ from contrib to net/altq. The ALTQ code is for many years	2015-04-16 20:22:40 +00:00
netsmb
nfs	Avoid closing unallocated socket in case socreate fails.	2015-02-28 20:30:29 +00:00
nfsclient	Remove some oldnfs remnants.	2015-04-18 16:08:06 +00:00
nfsserver
nlm
ofed	fd: remove filedesc argument from fdclose	2015-04-11 15:40:28 +00:00
opencrypto	Move zlib.c from net to libkern.	2015-04-22 14:38:58 +00:00
pc98	Fix kernel build ${MACHINE} path	2015-04-16 22:34:10 +00:00
powerpc	Implement hwpmc(4) for Freescale e500 core.	2015-04-18 21:39:17 +00:00
rpc	Remove hard limits on number of accepting NFS connections.	2015-04-07 10:25:27 +00:00
security	cred: add proc_set_cred helper	2015-03-16 00:10:03 +00:00
sparc64	Update this driver to not save copies of registers that are no longer used	2015-04-24 13:12:04 +00:00
sys	Cleanup a bit the clang attributes for type safety checking.	2015-04-25 18:17:08 +00:00
teken
tools
ufs	Limit the number of cylinder groups that will be searched when	2015-04-24 23:27:50 +00:00
vm	Revert r281451. It causes a panic/hang early in boot for a number of	2015-04-24 17:03:53 +00:00
x86	Move common code from sys/i386/i386/mp_machdep.c and	2015-04-24 16:20:56 +00:00
xdr
xen	Use SYSCTL_OUT_STR() to return strings.	2015-03-14 21:40:24 +00:00
Makefile