| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
calloc() and realloc() modernization.
This commit replaces calloc calls, which called calloc() as if it were
malloc() by allocating a multiple of objects as a sizeof multiplied by
the number of objects. The patch rectifies this by calling calloc() as
it was meant to be called.
This commit also replaces realloc() with reallocarray() in a similar
fashion as above. Instead of calculating the memory to reallocated
(changed) by multiplying sizeof by the number of objects, the sizeof
and number are passed as separate arguments to reallocarray(), letting
reallocarray() do the multiplication instead. Like the calloc()
adjustment above, this is approach is cleaner and more elegant than
than the previous code.
This has been tested on my production firewall and a laptop (also
running ipfilter).
Submitted by: pfg
|
|
|
|
| |
Ifdef out a redundant if statement when INET6 is disabled.
|
|
|
|
| |
Pointy hat to: cy
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
r316993:
Fix CID 1372601 in ipfilter/lib/parsefields.c, possible NULL pointer
dereference should reallocarray() fail.
Reported by: Coverity CID 1372601
r316994:
Fix CID 1372600 in ipfilter/tools/ipf_y.y, possible NULL pointer
dereference should reallocarray() fail.
Reported by: Coverity CID 1372600
r316997:
Use warnx() to issue error message.
Reported by: cem
|
|
|
|
|
|
| |
Use normal KNF cuddling of elses.
Reported by: bde
|
|
|
|
|
| |
Issue an error message when an incorrect flush argument is encountered
(and style fixup).
|
|
|
|
|
| |
Approved by: re@ (hrs@)
MFC after: 1 week
|
|
|
|
|
|
| |
I meant to do this on ^/user/ngie/more-tests
Pointyhat to: ngie (use svn info next time...)
|
| |
|
|
|
|
|
|
|
| |
Reviewed by: cy
MFC after: 1 week
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D2607
|
|
|
|
| |
Sponsored by: Nginx, Inc.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
where we want to create a new IP datagram.
o Add support for RFC6864, which allows to set IP ID for atomic IP
datagrams to any value, to improve performance. The behaviour is
controlled by net.inet.ip.rfc6864 sysctl knob, which is enabled by
default.
o In case if we generate IP ID, use counter(9) to improve performance.
o Gather all code related to IP ID into ip_id.c.
Differential Revision: https://reviews.freebsd.org/D2177
Reviewed by: adrian, cy, rpaulo
Tested by: Emeric POUPON <emeric.poupon stormshield.eu>
Sponsored by: Netflix
Sponsored by: Nginx, Inc.
Relnotes: yes
|
|
|
|
|
| |
Approved by: glebius (mentor)
Obtained from: netbsd CVS repo (r1.4), ipfilter CVS repo (r1.38)
|
|
|
|
|
| |
Approved by: glebius (mentor)
Obtained from: ipfilter CVS repo (r1.34), netbsd CVS repo (r1.4)
|
|
|
|
|
| |
Approved by: glebius (mentor)
Obtained from: ipfilter CVS repo (r1.37), netbsd CVS repo (r1.3)
|
|\
| |
| |
| |
| | |
Approved by: glebius (mentor)
BSD Licensed by: Darren Reed <darrenr@reed.wattle.id.au> (author)
|
| |
| |
| |
| |
| |
| |
| |
| | |
import of new ipfilter vendor sources by flattening them.
To keep the tags consistent with dist, the tags are also flattened.
Approved by: glebius (Mentor)
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
identical loop a few lines above.
Reviewed by: sam
Approved by: ed (mentor)
Silence from: darrenr (maintainer)
|
| |
| |
| |
| |
| |
| | |
Approved by: darrenr
MFC after: 1 week
Security: CERT VU#521769
|
| |
| |
| |
| | |
MFC after: 7 days
|
| |
| |
| |
| |
| |
| |
| | |
PR: bin/113879
Submitted by: kabe@sra-tohoku.co.jp
Reviewed by: darrenr
Approved by: re
|
| |
| |
| |
| | |
See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| | |
See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13
|
| | |
|
| | |
|
| |
| |
| |
| | |
MFC after: 1 weeks
|
| |
| |
| |
| | |
MFC after: 4 days
|
| | |
|
| | |
|
| |
| |
| |
| | |
parse bpf strings for filter rules in ipf.conf
|
| |
| |
| |
| | |
Requested by: mlaier
|
| |
| |
| |
| | |
build problems with rescue.
|
| |
| |
| |
| |
| | |
the ipl.h file is found. Also add back in ip_fil.c, which somehow went missing
in action.
|
|/
|
|
|
| |
that fixed in them....
* Keep unnecessary files out of the non-vendor part of this CVS repository.
|
|
|