1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-25 11:37:56 +00:00
freebsd/sys
Kristof Provost c41420d5dc pf: limit ioctl to a reasonable and tuneable number of elements
pf ioctls frequently take a variable number of elements as argument. This can
potentially allow users to request very large allocations.  These will fail,
but even a failing M_NOWAIT might tie up resources and result in concurrent
M_WAITOK allocations entering vm_wait and inducing reclamation of caches.

Limit these ioctls to what should be a reasonable value, but allow users to
tune it should they need to.

Differential Revision:	https://reviews.freebsd.org/D15018
2018-04-11 11:43:12 +00:00
..
amd64 linuxulator: add else case braces to reduce diffs between archs 2018-04-09 19:11:24 +00:00
arm [pi] Do not attach bcm2835_pwm if DTB node is not enabled 2018-04-10 20:31:25 +00:00
arm64 Enable Qualcomm Debug Subsystem (QDSS) block on MSM8916 SoC. 2018-04-10 12:53:48 +00:00
bsm
cam Do not fail devices just for errors in descriptor format. 2018-04-06 19:47:44 +00:00
cddl Correct a comment. 2018-04-10 14:07:02 +00:00
compat linuxulator: deduplicate linux_exec_imgact_try 2018-04-09 17:24:01 +00:00
conf Enable Qualcomm Debug Subsystem (QDSS) block on MSM8916 SoC. 2018-04-10 12:53:48 +00:00
contrib Import CK as of commit b19ed4c6a56ec93215ab567ba18ba61bf1cfbac8 2018-04-02 23:40:50 +00:00
crypto opencrypto: Integrate Chacha20 algorithm into OCF 2018-03-29 04:02:50 +00:00
ddb
dev hyperv/storvsc: storvsc_io_done(): do not use CAM_SEL_TIMEOUT 2018-04-10 18:05:02 +00:00
dts Remove deprecated DT sources of Armada 38x SoCs 2018-04-10 13:25:42 +00:00
fs Move most of the contents of opt_compat.h to opt_global.h. 2018-04-06 17:35:35 +00:00
gdb
geom Annotate geom modules with MODULE_VERSION 2018-04-10 19:18:16 +00:00
gnu
i386 linuxulator: deduplicate linux_exec_imgact_try 2018-04-09 17:24:01 +00:00
isa
kern locks: extend speculative spin waiting for readers to drain 2018-04-11 01:43:29 +00:00
kgssapi
libkern
mips Align OF_getencprop_alloc API with OF_getencprop and OF_getprop_alloc 2018-04-09 22:06:16 +00:00
modules Update VMCI license based on comments from core, the FreeBSD Foundation, 2018-04-08 01:32:56 +00:00
net Split out flag manipulation from general context manipulation in iflib 2018-04-10 19:48:24 +00:00
net80211 Use an accessor function to access ifr_data. 2018-03-30 18:50:13 +00:00
netgraph
netinet Add missing header change from r332381. 2018-04-10 17:00:37 +00:00
netinet6 Fix a logical inversion bug. 2018-04-08 12:08:20 +00:00
netipsec Set the proper vnet in IPsec callback functions. 2018-03-20 17:05:23 +00:00
netpfil pf: limit ioctl to a reasonable and tuneable number of elements 2018-04-11 11:43:12 +00:00
netsmb
nfs Remove infrastructure for token-ring networks. 2018-03-28 23:33:26 +00:00
nfsclient
nfsserver
nlm
ofed Improve copy-and-pasted versions of SIOCGIFADDR. 2018-03-27 20:51:49 +00:00
opencrypto Move most of the contents of opt_compat.h to opt_global.h. 2018-04-06 17:35:35 +00:00
powerpc Reenter KDB on fault on powerpc, instead of panicking 2018-04-10 21:14:54 +00:00
riscv Rename assym.s to assym.inc 2018-03-20 17:58:51 +00:00
rpc
security Use an accessor function to access ifr_data. 2018-03-30 18:50:13 +00:00
sparc64 Clean up OF_getprop_alloc API 2018-04-08 22:59:34 +00:00
sys Add the ioctl definitions for spigen get/set spi mode. Should have been 2018-04-07 20:53:34 +00:00
teken Pedantic polishing of code to please FlexeLint. 2018-04-08 19:23:50 +00:00
tests
tools Add dtb overlays support 2018-03-24 21:30:24 +00:00
ufs Renumber soft-update types starting at 1 instead of 0 to avoid confusion 2018-04-05 00:32:01 +00:00
vm Handle Skylake-X errata SKZ63. 2018-04-07 17:06:13 +00:00
x86 Move most of the contents of opt_compat.h to opt_global.h. 2018-04-06 17:35:35 +00:00
xdr
xen
Makefile