| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
| |
panic at kmem_alloc() via malloc(9).
PR: kern/77748
Submitted by: Wojciech A. Koszek
OK'ed by: brooks
Security: local DoS, a sample code in the PR.
MFC after: 3 days
|
| |
|
|
|
|
|
|
| |
eliminate grauitous ptr checks that follow ptr deref's
Noticed by: Coverity Prevent analysis tool
|
|
|
|
|
| |
Noticed by: Coverity Prevent analysis tool
Reviewed by: rwatson
|
| |
|
|
|
|
|
|
|
| |
allocate the additional mbuf (if needed) using a non-sleeping memory
allocation.
MFC after: 7 days
|
|
|
|
|
|
|
|
| |
readability.
- Call carp_carpdev_state() from if_link_state_change() if interface has
associated CARP interface.
Sponsored by: Rambler
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
hosts to share an IP address, providing high availability and load
balancing.
Original work on CARP done by Michael Shalayeff, with many
additions by Marco Pfatschbacher and Ryan McBride.
FreeBSD port done solely by Max Laier.
Patch by: mlaier
Obtained from: OpenBSD (mickey, mcbride)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
a packet has VLAN mbuf tag attached. This is faster to check than
m_tag_locate(), and allows us to use the tags in non-vlan(4) VLAN
producers.
The first argument to VLAN_OUTPUT_TAG() is now unused but retained
for backward compatibility.
While here, embellish a fix in rev. 1.174 of if_ethersubr.c -- it
now checks for packets with VLAN (mbuf) tags, and it should now
be possible to bridge(4) on vlan(4)'s whose parent interfaces
support VLAN decapsulation in hardware.
Reviewed by: sam
|
|
|
|
|
|
| |
checking global presence of ng_ether(4).
Reviewed by: ru
|
|
|
|
|
|
|
|
|
| |
driver did VLAN decapsulation in hardware, we were passing a frame
as if it came for the parent (non-VLAN) interface. Stop this from
happening.
Reminded by: glebius
Security: This could pose a security risk in some setups
|
|
|
|
|
|
|
|
|
| |
which will finally lead to kernel panic.
Security: This prevents a local (root-launched) DoS
Submitted by: Wojciech A. Koszek [dunstan at freebsd czest pl]
PR: 77421
MFC After: 1 week
|
|
|
|
| |
Found by: src/tools/tools/kernxref
|
|
|
|
| |
Reviewed by: rwatson
|
|
|
|
|
|
|
| |
block from the global raw socket list.
Submitted by: Roselyn Lee <rosel at verniernetworks dot com>
MFC after: 1 week
|
| |
|
|
|
|
| |
The cloner structure isn't referenced by name outside this file.
|
|
|
|
|
| |
in struct ip_fw_args itself.
- Remove redundant &= 0xffff from dummynet_io().
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- ip_fw_chk() returns action as function return value. Field retval is
removed from args structure. Action is not flag any more. It is one
of integer constants.
- Any action-specific cookies are returned either in new "cookie" field
in args structure (dummynet, future netgraph glue), or in mbuf tag
attached to packet (divert, tee, some future action).
o Convert parsing of return value from ip_fw_chk() in ipfw_check_{in,out}()
to a switch structure, so that the functions are more readable, and a future
actions can be added with less modifications.
Approved by: andre
MFC after: 2 months
|
|
|
|
|
| |
check what the code does. Separators are spaces, commas or tabs;
not '*' characters (as one may assume by reading the old comment).
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Introduce another ng_ether(4) callback ng_ether_link_state_p, which
is called from if_link_state_change(), every time link is changed.
- In ng_ether_link_state() send netgraph control message notifying
of link state change to a node connected to "lower" hook.
Reviewed by: sam
MFC after: 2 weeks
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Silence on: net@, current@, hackers@.
No objections: joerg
Requested by: by many (mostly Cronyx) users for a long long time.
MFC after: 10 days
PR: kern/21771, kern/66348
|
|
|
|
|
| |
Submitted by: Johnny Eriksson <bygg@cafax.se>
MFC after: 5 days
|
|
|
|
|
|
| |
Include selinfo.h (don't rely on vnode.h to do so)
Check O_NONBLOCK instead of IO_NELAY
Don't include vnode.h
|
|
|
|
|
|
|
| |
Include fcntl.h
Include selinfo.h (don't rely on vnode.h to do so)
Check O_NONBLOCK instead of IO_NDELAY
Don't include vnode.h
|
|
|
|
|
|
|
| |
Check O_NONBLOCK instead of IO_NDELAY
Include uio.h
Don't include vnode.h
Don't include filedesc.h
|
|
|
|
| |
Don't include <sys/vnode.h>
|
|
|
|
|
|
|
| |
now...
Submitted by: Ed Maste of Sandvine Inc.
MFC after: 1 week
|
| |
|
|
|
|
|
|
|
| |
MPSAFE could be turned off by IFF_NEEDSGIANT.
Silence on: net@, current@, hackers@.
No objections: joerg
|
|
|
|
|
| |
o add new if_link_state_change routine that deals with link state changes
o change mii to use if_link_state_change
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Introduce domain_init_status to keep track of the init status of the domains
list (surprise). 0 = uninitialized, 1 = initialized/unpopulated, 2 =
initialized/done. Higher values can be used to support late addition of
domains which right now "works", but is potential dangerous. I choose to
only give a warning when doing so.
Use domain_init_status with if_attachdomain[1]() to ensure that we have a
complete domains list when we init the if_afdata array. Store the current
value of domain_init_status in if_afdata_initialized. This way we can update
if_afdata after a new protocol has been added (once that is allowed).
Submitted by: se (with changes)
Reviewed by: julian, glebius, se
PR: kern/73321 (partly)
|
|
|
|
|
|
|
|
|
|
|
| |
Printf() a warning if if_attachdomain() is called more than once on an
interface to generate some noise on mailing lists when this occurs.
Fix up style in if_start(), where spaces crept in instead of tabs at
some point.
MFC after: 1 week
MFC note: Not the printf().
|
|
|
|
|
|
|
| |
hardware cannot take anymore packets, and so will supress the calling of
the device's if_start method...
Submitted by: bde
|
|
|
|
| |
stability anyway.
|
|
|
|
|
|
| |
default elements in net_init_domain().
This makes it possible to grep these structures and see any bogosities.
|
| |
|
|
|
|
|
|
| |
This fixes the panic that occurs when using ppp(4)
Reported and tested by: Yann Berthier (yb at sainte-barbe dot org)
|
|
|
|
|
|
|
|
| |
implementation. This also gives a performance improvement, because
m_uiotombuf() utilizes clusters.
Approved by: julian (mentor)
MFC after: 1 month
|
|
|
|
|
|
|
|
|
| |
in orden to harden the ABI for 5.x; this will permit us to modify
the locking in the ifnet packet dispatch without requiring drivers
to be recompiled.
MFC after: 3 days
Discussed at: EuroBSDCon Developer's Summit
|
|
|
|
|
|
|
|
| |
the resistance of the network driver ABI to changes that will be
required as we optimize locking.
MFC after: 3 days
Discussed at: Developer Summit
|
| |
|
|
|
|
|
|
|
|
|
| |
acquire Giant if the passed interface has IFF_NEEDSGIANT set on it.
Modify calls into (ifp)->if_ioctl() in if.c to use these macros in order
to ensure that Giant is held.
MFC after: 3 days
Bumped into by: jmg
|