1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-23 11:18:54 +00:00
freebsd/sys
Max Laier cf21d53cbf When doing matching based on dst_ip/src_ip make sure we are really looking
on an IPv4 packet as these variables are uninitialized if not.  This used to
allow arbitrary IPv6 packets depending on the value in the uninitialized
variables.

Some opcodes (most noteably O_REJECT) do not support IPv6 at all right now.

Reviewed by:	brooks, glebius
Security:	IPFW might pass IPv6 packets depending on stack contents.
Approved by:	re (blanket)
2005-06-12 16:27:10 +00:00
..
alpha Do not allocate memory based on not-checked argument from userland. 2005-06-11 14:58:20 +00:00
amd64 Introduce a procedure, pmap_page_init(), that initializes the 2005-06-10 03:33:36 +00:00
arm Remove the last use of pmap_initialized. 2005-06-10 13:31:30 +00:00
boot Fix getsecs(). It was not counting the seconds right. The immediate 2005-06-04 21:55:51 +00:00
bsm For consistency with more system include files, add a trailing '_' to 2005-05-29 16:11:34 +00:00
cam Add a quirk for my pen-drive. 2005-06-09 17:35:04 +00:00
coda - Change all filesystems and vfs_cache to relock the dvp once the child is 2005-04-13 10:59:09 +00:00
compat Do not allocate memory based on not-checked argument from userland. 2005-06-11 14:58:20 +00:00
conf Refactor the NETSMBCRYPTO option so that it does the same on all 2005-06-12 00:47:21 +00:00
contrib Defer ip_output of pfsync updates to an independent callout thread instead 2005-06-10 17:23:49 +00:00
crypto gbde(8) is also rejndael user. 2005-03-11 22:07:04 +00:00
ddb Don't enter the debugger if KDB_UNATTENDED is set or if 2005-04-20 20:52:46 +00:00
dev Build on pc98. 2005-06-12 16:21:44 +00:00
doc
fs Avoid casting from (int *) to (size_t *) in order to fix udf_iconv on amd64. 2005-06-05 02:09:48 +00:00
gdb check return value of gdb_rx_varhex 2005-03-28 18:31:18 +00:00
geom After provider creation!! 2005-05-25 15:54:17 +00:00
gnu Allow EVFILT_VNODE events to work on every filesystem type, not just 2005-06-09 20:20:31 +00:00
i4b Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
i386 - Hook up the new locations of the atkbdc(4), atkbd(4) and psm(4) source 2005-06-10 20:56:38 +00:00
ia64 Introduce a procedure, pmap_page_init(), that initializes the 2005-06-10 03:33:36 +00:00
isa - Hook up the new locations of the atkbdc(4), atkbd(4) and psm(4) source 2005-06-10 20:56:38 +00:00
isofs/cd9660 - Change all filesystems and vfs_cache to relock the dvp once the child is 2005-04-13 10:59:09 +00:00
kern Do not allocate memory while holding a mutex. 2005-06-12 07:03:23 +00:00
libkern Fix kiconv on the 64bit plathomes. 2005-05-24 15:38:08 +00:00
modules Attach ng_tcpmss to the build. 2005-06-10 08:05:13 +00:00
net Return NULL instead of a bogus pointer from if_alloc when if_com_alloc 2005-06-12 00:53:03 +00:00
net80211 don't look at the wme ie in a beacon unless we negotiated use 2005-06-10 21:30:29 +00:00
netatalk Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
netatm Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
netgraph Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
netinet When doing matching based on dst_ip/src_ip make sure we are really looking 2005-06-12 16:27:10 +00:00
netinet6 Fix IPv6 neighbor discovery by using IF_LLADDR to get the mac address 2005-06-12 00:45:24 +00:00
netipsec Correct typo in a comment describing vshiftl(). 2005-06-02 23:56:10 +00:00
netipx Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
netkey
netnatm
netncp
netsmb lockmgr(...,LK_DRAIN,...) requires a balancing LK_RELEASE: recent 2005-05-13 11:27:48 +00:00
nfs
nfs4client - We want if (mrep != NULL) not if (m_freem != NULL). m_freem will never 2005-04-25 05:11:19 +00:00
nfsclient Fix a serious deadlock with the NFS client. Given a large enough 2005-06-10 23:50:41 +00:00
nfsserver NFS write gathering defers execution of NFS server write requests to wait 2005-04-17 16:25:36 +00:00
opencrypto malloc.h relies on param.h for a definition of MAXCPU. I guess that there is 2005-05-30 05:01:44 +00:00
pc98 Sync with syscons update (Add new member to struct sc_rndr_sw). 2005-05-29 11:53:14 +00:00
pccard Change a directory layout for pc98. 2005-05-10 12:02:18 +00:00
pci Move if_alloc() up so it's before mii_phy_probe(). 2005-06-11 01:37:46 +00:00
posix4 Introduce MAC Framework and MAC Policy entry points to label and control 2005-05-04 10:39:15 +00:00
powerpc Unbreak the PowerPC GENERIC build. 2005-06-11 10:59:02 +00:00
rpc - Don't call rpcclnt_realign() if we don't have any mbufs to realign. 2005-03-19 01:16:25 +00:00
security Correct grammar error in comment 2005-06-10 04:44:38 +00:00
sparc64 Turn on atkbdc(4), atkbd(4), creator(4), machfb(4), syscons(4), ohci(4), 2005-06-10 23:11:16 +00:00
sys Do not allocate memory based on not-checked argument from userland. 2005-06-11 14:58:20 +00:00
tools Allow EVFILT_VNODE events to work on every filesystem type, not just 2005-06-09 20:20:31 +00:00
ufs Allow EVFILT_VNODE events to work on every filesystem type, not just 2005-06-09 20:20:31 +00:00
vm The new contigmalloc(9) has a bad degenerate case where there were 2005-06-11 00:05:16 +00:00
Makefile When building cscopnamefile, default architecture to ${MACHINE}, not i386. 2005-03-08 00:09:41 +00:00