summaryrefslogtreecommitdiffstats
path: root/sys/netinet6
Commit message (Collapse)AuthorAgeFilesLines
* Add ``options RANDOM_IP_ID'' which randomizes the ID field of IP packets.kris2001-06-011-0/+4
| | | | | | | | | This closes a minor information leak which allows a remote observer to determine the rate at which the machine is generating packets, since the default behaviour is to increment a counter for each packet sent. Reviewed by: -net Obtained from: OpenBSD
* Back out jesper's 2001/05/31 14:58:11 PDT commit. It does not compile.obrien2001-06-011-1/+1
|
* Change the default value of net.inet6.ip6.maxfragpackets fromjesper2001-05-311-1/+1
| | | | | | 200 to NMBCLUSTERS/4 to match the IPv4 case. MFC after: 1 week
* Fix memory leak.ume2001-05-231-0/+2
| | | | Submitted by: itojun
* M_COPY_PKTHDR has to be done before MCLGET.ume2001-05-221-4/+5
| | | | Obtained from: KAME
* Plug memoly leak in overlaps fragment cases.sumikawa2001-05-201-0/+6
| | | | Obtained from: KAME
* Fix typo in previous commit.ume2001-04-201-1/+1
| | | | Submitted by: JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* - Fix to receive icmp6 echo reply within the host itself to ff02::1.ume2001-04-191-2/+32
| | | | | | | - Fix to receive icmp6 echo reply to link-local of itself. Reported by: Eriya Akasaka <eakasaka@rodfbs.org> Submitted by: JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* - correct logic of per-address input packet counts for lo0ume2001-04-051-16/+29
| | | | | | - reject packets to fe80::xxxx%lo0 (xxxx != 1) Submitted by: JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* Make per-address input packet counts for lo0 work.ume2001-03-281-6/+22
| | | | | Reported by: bmah Submitted by: Noriyasu KATO <noriyasu.kato@toshiba.co.jp> (via itojun)
* nuke IPSEC_SRCSEL which does not do the right thing.ume2001-03-161-33/+3
| | | | | | | adjust state->ro if the tunnel endpoint is offlink. KAME PR 233. PR: kern/21079
* Merge from kame (1.175 -> 1.176):kuriyama2001-03-161-1/+27
| | | | cope with freebsd4 bridge code.
* Plug several mbuf leaks in error cases (in nd6)bmilekic2001-03-111-3/+12
| | | | Submitted by: jhay
* More IP option length validation.kris2001-02-264-21/+41
| | | | | | | | | | | | | | | | | Includes the following revisions from KAME (two of these were actually committed previously but the CVS revisions weren't documented): 1.40 kame/kame/sys/netinet6/ah_core.c (committed in previous rev) 1.41 kame/kame/sys/netinet6/ah_core.c 1.28 kame/kame/sys/netinet6/ah_output.c (committed in previous rev) 1.29 kame/kame/sys/netinet6/ah_output.c 1.30 kame/kame/sys/netinet6/ah_output.c 1.129 kame/kame/sys/netinet6/nd6.c 1.130 kame/kame/sys/netinet6/nd6.c 1.24 kame/kame/sys/netinet6/dest6.c 1.25 kame/kame/sys/netinet6/dest6.c Obtained from: KAME
* Better detection of duplicated initialization.simokawa2001-02-201-2/+8
| | | | Obtained from: KAME
* Correct IPv4 option processing.kris2001-02-202-2/+22
| | | | | Submitted by: itojun Obtained from: KAME
* Switch to using a struct xucred instead of a struct xucred when notgreen2001-02-181-5/+9
| | | | | | | | | | | | | | | | | actually in the kernel. This structure is a different size than what is currently in -CURRENT, but should hopefully be the last time any application breakage is caused there. As soon as any major inconveniences are removed, the definition of the in-kernel struct ucred should be conditionalized upon defined(_KERNEL). This also changes struct export_args to remove dependency on the constantly-changing struct ucred, as well as limiting the bounds of the size fields to the correct size. This means: a) mountd and friends won't break all the time, b) mountd and friends won't crash the kernel all the time if they don't know what they're doing wrt actual struct export_args layout. Reviewed by: bde
* Fix typo: compatability -> compatibility.asmodai2001-02-061-1/+1
| | | | Compatability is not an existing english word.
* Fix typo: seperate -> separate.asmodai2001-02-061-1/+1
| | | | Seperate does not exist in the english language.
* Convert if_multiaddrs from LIST to TAILQ so that it can be traversedphk2001-02-062-3/+2
| | | | | | backwards in the three drivers which want to do that. Reviewed by: mikeh
* Yikes, these files bogusly #include "loop.h" but didn't use the value.peter2001-01-293-6/+0
| | | | My searching for NLOOP missed them. :-(
* Fix the vulnerability with TCP ECE packets recently fixed in ipfw.kris2001-01-232-5/+18
| | | | This is untested, but believed to work.
* avoid conflicting #define symbol (s/FW_IFNLEN/IP6&/).ume2001-01-222-4/+4
| | | | Obtained from: KAME
* on in6_ifdetach(), do not remove default route mistakenlyume2001-01-221-2/+2
| | | | Obtained from: KAME
* First step towards an MP-safe zone allocator:des2001-01-211-1/+1
| | | | | | | - have zalloc() and zfree() always lock the vm_zone. - remove zalloci() and zfreei(), which are now redundant. Reviewed by: bmilekic, jasone
* permit icmp6 type <= 256 (was 32).ume2001-01-211-1/+1
| | | | Obtained from: KAME
* When ip6_fw_ctl() or soopt_mcopyout() return without success,ume2001-01-201-1/+1
| | | | | | don't free mbuf. It is already freed by these routins. PR: kern/24248
* workaround; be sure to initialize nd6 interface information when IPv6itojun2001-01-181-0/+8
| | | | | | | interface address gets added. this will avoid presenting EMSGSIZE when outgoing interface is down (and never brought up). sync with kame.
* do not touch ra_addr if it is NULL. from IIJ SEIL teamume2001-01-021-2/+4
| | | | Obtained from: KAME
* * Rename M_WAIT mbuf subsystem flag to M_TRYWAIT.bmilekic2000-12-213-7/+7
| | | | | | | | | | | | | | | | | | This is because calls with M_WAIT (now M_TRYWAIT) may not wait forever when nothing is available for allocation, and may end up returning NULL. Hopefully we now communicate more of the right thing to developers and make it very clear that it's necessary to check whether calls with M_(TRY)WAIT also resulted in a failed allocation. M_TRYWAIT basically means "try harder, block if necessary, but don't necessarily wait forever." The time spent blocking is tunable with the kern.ipc.mbuf_wait sysctl. M_WAIT is now deprecated but still defined for the next little while. * Fix a typo in a comment in mbuf.h * Fix some code that was actually passing the mbuf subsystem's M_WAIT to malloc(). Made it pass M_WAITOK instead. If we were ever to redefine the value of the M_WAIT flag, this could have became a big problem.
* Staticize some malloc M_ instances.phk2000-12-081-1/+1
|
* Lock down the network interface queues. The queue mutex must be obtainedjlemon2000-11-253-22/+9
| | | | | | | | | | | | | | before adding/removing packets from the queue. Also, the if_obytes and if_omcasts fields should only be manipulated under protection of the mutex. IF_ENQUEUE, IF_PREPEND, and IF_DEQUEUE perform all necessary locking on the queue. An IF_LOCK macro is provided, as well as the old (mutex-less) versions of the macros in the form _IF_ENQUEUE, _IF_QFULL, for code which needs them, but their use is discouraged. Two new macros are introduced: IF_DRAIN() to drain a queue, and IF_HANDOFF, which takes care of locking/enqueue, and also statistics updating/start if necessary.
* Change check from mbuf->m_ext.ext_free to use the new ext_type in orderbmilekic2000-11-111-6/+3
| | | | | | | | | | to determine whether the given mbuf has a cluster (or some other type of external storage) attached to it. Note: This code should eventually be made to use M_WRITABLE() to determine whether or not a copy should be made. Reviewed by: jlemon
* backout my previous commit (KAME PR 296). foo != TUNNEL willume2000-11-091-4/+0
| | | | | | forbid "ANY" SA from being used for tnunel mode. Reported by: Chris Cason <casonc@netplex.aussie.org>
* check whether the packet is tunnel mode. reported from <larse@ISI.EDU>ume2000-11-031-0/+4
| | | | Obtained from: KAME
* Move suser() and suser_xxx() prototypes and a related #define fromphk2000-10-294-4/+0
| | | | | | | | | <sys/proc.h> to <sys/systm.h>. Correctly document the #includes needed in the manpage. Add one now needed #include of <sys/systm.h>. Remove the consequent 48 unused #includes of <sys/proc.h>.
* Count per-address statistics for IP fragments.joe2000-10-291-0/+6
| | | | | Requested by: ru Obtained from: BSD/OS
* Convert all users of fldoff() to offsetof(). fldoff() is badphk2000-10-275-17/+1
| | | | | | | | | | | | | | | | | | | | | | | because it only takes a struct tag which makes it impossible to use unions, typedefs etc. Define __offsetof() in <machine/ansi.h> Define offsetof() in terms of __offsetof() in <stddef.h> and <sys/types.h> Remove myriad of local offsetof() definitions. Remove includes of <stddef.h> in kernel code. NB: Kernelcode should *never* include from /usr/include ! Make <sys/queue.h> include <machine/ansi.h> to avoid polluting the API. Deprecate <struct.h> with a warning. The warning turns into an error on 01-12-2000 and the file gets removed entirely on 01-01-2001. Paritials reviews by: various. Significant brucifications by: bde
* be careful on mbuf overrun on ctlinput.itojun2000-10-231-1/+5
| | | | | short icmp6 packet may be able to panic the kernel. sync with kame.
* kame 1.32 -> 1.33itojun2000-10-231-1/+27
| | | | | | | | | in add_m6fc(), set interface list for all cases. in response to a report from Hoerdt Mickael. kame 1.31 -> 1.32 discard PIM register if the version of the inner packet is incorrect (i.e. IPv6) (according to clarfication of recent discussion in the IETF pim ML)
* Augment the 'ifaddr' structure with a 'struct if_data' to keepjoe2000-10-192-1/+12
| | | | | | | | | | | statistics on a per network address basis. Teach the IPv4 and IPv6 input/output routines to log packets/bytes against the network address connected to the flow. Teach netstat to display the per-address stats for IP protocols when 'netstat -i' is evoked, instead of displaying the per-interface stats.
* Fix broken const'ness in declaration of sha1_loop().archie2000-10-091-4/+4
|
* make pr_type type meet with struct protosw. sync with kameitojun2000-10-031-2/+2
|
* add missing \n. sync with kame.itojun2000-10-011-3/+3
|
* Make ip6fw as loadable module.ume2000-09-235-24/+54
|
* examined the gateway (from the routing table) only when the addressume2000-09-151-0/+10
| | | | | | family of the gateway is AF_INET6. Submitted by: JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* Follow BSD/OS and NetBSD, keep the ip_id field in network order all the time.ru2000-09-141-2/+0
| | | | Requested by: wollman
* add attrbute(packed) to union def with specific align constraitn.itojun2000-09-091-11/+11
| | | | | | | move file static variable to auto variable, make in6_cksum() work better in kernel-MP environment. sync with kame. From: Alfred Perlstein <bright@wintelcom.net>
* repair type 0 routing header support. it was caused by RFC2292/2292bisitojun2000-09-031-1/+2
| | | | difference. from: jinmei@kame.net
* warn that setsockopt/sysctl # spaces are shared among *BSD, and should betteritojun2000-08-271-0/+2
| | | | be consulted with KAME guys if you want a number.
OpenPOWER on IntegriCloud