summaryrefslogtreecommitdiffstats
path: root/sys/netinet6
Commit message (Collapse)AuthorAgeFilesLines
* fixed a mbuf leak when an IP packet from ESP tunnel is redirectedsuz2003-03-291-0/+7
| | | | obtained from: KAME
* made sure to keep the current stored lifetime when it was not updatedume2003-03-261-3/+9
| | | | | | | | | | | by an RA. (a detailed description of this issue is found at the following URL.) http://www.tahi.org/report/freebsd/freebsd48-rc2-20030316/host/lcna-stateless-addrconf/38.html Reported by: Ozoe Nobumichi <ozoe@tahi.org> through a periodic TAHI test Submitted by: JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp> Obtained from: KAME
* correct malloc flag argumentsam2003-03-121-1/+1
| | | | Reported by: Kris Kennaway <kris@obsecurity.org>
* Update netisr handling; Each SWI now registers its queue, and all queuejlemon2003-03-045-32/+6
| | | | | | | | | | drain routines are done by swi_net, which allows for better queue control at some future point. Packets may also be directly dispatched to a netisr instead of queued, this may be of interest at some installations, but currently defaults to off. Reviewed by: hsu, silby, jayanth, sam Sponsored by: DARPA, NAI Labs
* Fix another case for timewait.jlemon2003-02-241-0/+3
|
* Remove unused variables in the IPSEC case.jlemon2003-02-201-1/+0
| | | | Submitted by: Lars Eggert <larse@ISI.EDU>
* Add a TCP TIMEWAIT state which uses less space than a fullblown TCPjlemon2003-02-197-73/+83
| | | | | | | | control block. Allow the socket and tcpcb structures to be freed earlier than inpcb. Update code to understand an inp w/o a socket. Reviewed by: hsu, silby, jayanth Sponsored by: DARPA, NAI Labs
* Back out M_* changes, per decision of the TRB.imp2003-02-1925-107/+107
| | | | Approved by: trb
* M_MOVE_PKTHDR must happen before any cluster is attachedsam2003-02-181-2/+3
| | | | | Submitted by: Harti Brandt <brandt@fokus.fraunhofer.de> MFC after: 1 day
* Consolidate MIN/MAX macros into one place (param.h).alfred2003-02-021-1/+0
| | | | Submitted by: Hiten Pandya <hiten@unixdaemons.com>
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-2125-107/+107
| | | | Merge M_NOWAIT/M_DONTWAIT into a single flag M_NOWAIT.
* "struct route" is not sufficient. NetBSD PR 18751ume2003-01-082-0/+2
| | | | | Obtained from: KAME MFC after: 1 days
* don't reference a pkthdr after M_MOVE_PKTHDR has "remove it"; insteadsam2003-01-062-9/+7
| | | | | | reference the pkthdr now in the destination of the move Sponsored by: Vernier Networks
* purge extraneous clears of M_PKTHDR since M_MOVE_PKTHDR does this alreadysam2003-01-062-3/+0
|
* Bah, just use %zu for printing size_t.mike2003-01-061-4/+4
|
* Cast return values of sizeof() to int so they can be printed with %d.mike2003-01-061-2/+2
| | | | | | | The size of this struct is unlikely to ever grow beyond what an int can represent. Noticed by: alpha tinderbox
* correct pkthdr length calculation for ipv6 echo packets; after moving a packetsam2003-01-051-3/+6
| | | | | | | | | header with M_MOVE_PKTHDR one should not reference the packet header in the original packet; in this case the code was assuming that m_adj would alter m_pkthdr.len which stopped happening because M_MOVE_PKTHDR removes the M_PKTHDR bit from m_flags Submitted by: Bill Fenner <fenner@research.att.com>
* Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,schweikh2003-01-013-4/+4
| | | | especially in troff files.
* Fix typos, mostly s/ an / a / where appropriate and a few s/an/and/schweikh2002-12-302-3/+3
| | | | Add FreeBSD Id tag where missing.
* Correct mbuf packet header propagation. Previously, packet headerssam2002-12-305-19/+21
| | | | | | | | | | | | | | | | | | | | | | were sometimes propagated using M_COPY_PKTHDR which actually did something between a "move" and a "copy" operation. This is replaced by M_MOVE_PKTHDR (which copies the pkthdr contents and "removes" it from the source mbuf) and m_dup_pkthdr which copies the packet header contents including any m_tag chain. This corrects numerous problems whereby mbuf tags could be lost during packet manipulations. These changes also introduce arguments to m_tag_copy and m_tag_copy_chain to specify if the tag copy work should potentially block. This introduces an incompatibility with openbsd which we may want to revisit. Note that move/dup of packet headers does not handle target mbufs that have a cluster bound to them. We may want to support this; for now we watch for it with an assert. Finally, M_COPYFLAGS was updated to include M_FIRSTFRAG|M_LASTFRAG. Supported by: Vernier Networks Reviewed by: Robert Watson <rwatson@FreeBSD.org>
* If the caller of rtrequest*(RTM_DELETE, ...) asked for a copy ofru2002-12-252-20/+4
| | | | | | the entry being removed (ret_nrt != NULL), increment the entry's rt_refcnt like we do it for RTM_ADD and RTM_RESOLVE, rather than messing around with 1->0 transitions for rtfree() all over.
* SMP locking for radix nodes.hsu2002-12-242-2/+11
|
* SMP locking for ifnet list.hsu2002-12-223-2/+19
|
* define HAVE_PPSRATECHECK now that we have this stuff in the kernelsam2002-12-201-0/+1
| | | | | (probably belongs elsewhere; add it this way for now so the system will build)
* o Untangle the confusion with the malloc flags {M_WAITOK, M_NOWAIT} andbmilekic2002-12-194-6/+6
| | | | | | | | | | the mbuf allocator flags {M_TRYWAIT, M_DONTWAIT}. o Fix a bpf_compat issue where malloc() was defined to just call bpf_alloc() and pass the 'canwait' flag(s) along. It's been changed to call bpf_alloc() but pass the corresponding M_TRYWAIT or M_DONTWAIT flag (and only one of those two). Submitted by: Hiten Pandya <hiten@unixdaemons.com> (hiten->commit_count++)
* Lock up ifaddr reference counts.hsu2002-12-181-4/+4
|
* fixed a bug that IPv6 multicast packet is not forwarded if its packet size ↵suz2002-12-161-1/+1
| | | | | | | | is equal to the outgoing interface's MTU Approved by: re Obtained from: KAME MFC after: 3 days
* plugged memory leakage in some erroneous casesume2002-10-311-5/+6
| | | | | Obtained from: KAME MFC after: 1 week
* last arg of in6?_gif_output() is not used any more.ume2002-10-172-3/+2
| | | | | Obtained from: KAME MFC after: 3 weeks
* use encapcheck.ume2002-10-161-16/+0
| | | | | Obtained from: KAME MFC after: 3 weeks
* - after gif_set_tunnel(), psrc/pdst may be null. set IFF_RUNNING accordingly.ume2002-10-162-27/+102
| | | | | | | | | | | | | | - set IFF_UP on SIOCSIFADDR. be consistent with others. - set if_addrlen explicitly (just in case) - multi destination mode is long gone. - missing break statement - add gif_set_tunnel(), so that we can set tunnel address from within the kernel at ease. - encap_attach/detach dynamically on ioctls - move encap_attach() to dedicated function in in*_gif.c Obtained from: KAME MFC after: 3 weeks
* Tie new "Fast IPsec" code into the build. This involves the usualsam2002-10-168-4/+153
| | | | | | | | | | | | configuration stuff as well as conditional code in the IPv4 and IPv6 areas. Everything is conditional on FAST_IPSEC which is mutually exclusive with IPSEC (KAME IPsec implmentation). As noted previously, don't use FAST_IPSEC with INET6 at the moment. Reviewed by: KAME, rwatson Approved by: silence Supported by: Vernier Networks
* Replace aux mbufs with packet tags:sam2002-10-1613-208/+59
| | | | | | | | | | | | | | | | | | | o instead of a list of mbufs use a list of m_tag structures a la openbsd o for netgraph et. al. extend the stock openbsd m_tag to include a 32-bit ABI/module number cookie o for openbsd compatibility define a well-known cookie MTAG_ABI_COMPAT and use this in defining openbsd-compatible m_tag_find and m_tag_get routines o rewrite KAME use of aux mbufs in terms of packet tags o eliminate the most heavily used aux mbufs by adding an additional struct inpcb parameter to ip_output and ip6_output to allow the IPsec code to locate the security policy to apply to outbound packets o bump __FreeBSD_version so code can be conditionalized o fixup ipfilter's call to ip_output based on __FreeBSD_version Reviewed by: julian, luigi (silent), -arch, -net, darren Approved by: julian, silence from everyone else Obtained from: openbsd (mostly) MFC after: 1 month
* s/__attribute__((__packed__))/__packed/galfred2002-09-231-1/+1
|
* Lock the sysctl(8) knobs that turn ip{,6}fw(8) firewalling andcjc2002-08-251-3/+5
| | | | | | | | | | | firewall logging on and off when at elevated securelevel(8). It would be nice to be able to only lock these at securelevel >= 3, like rules are, but there is no such functionality at present. I don't see reason to be adding features to securelevel(8) with MAC being merged into 5.0. PR: kern/39396 Reviewed by: luigi MFC after: 1 week
* check packet length before fetching ESP crypto checksum.ume2002-08-241-0/+8
| | | | | Obtained from: KAME MFC after: 2 days
* Replace (ab)uses of "NULL" where "0" is really meant.archie2002-08-222-6/+6
|
* o Merge <machine/ansi.h> and <machine/types.h> into a new headermike2002-08-211-3/+3
| | | | | | | | | | | | | | | | | | | | | called <machine/_types.h>. o <machine/ansi.h> will continue to live so it can define MD clock macros, which are only MD because of gratuitous differences between architectures. o Change all headers to make use of this. This mainly involves changing: #ifdef _BSD_FOO_T_ typedef _BSD_FOO_T_ foo_t; #undef _BSD_FOO_T_ #endif to: #ifndef _FOO_T_DECLARED typedef __foo_t foo_t; #define _FOO_T_DECLARED #endif Concept by: bde Reviewed by: jake, obrien
* Create new functions in_sockaddr(), in6_sockaddr(), andtruckman2002-08-212-38/+58
| | | | | | | | | | | | | | | | | in6_v4mapsin6_sockaddr() which allocate the appropriate sockaddr_in* structure and initialize it with the address and port information passed as arguments. Use calls to these new functions to replace code that is replicated multiple times in in_setsockaddr(), in_setpeeraddr(), in6_setsockaddr(), in6_setpeeraddr(), in6_mapped_sockaddr(), and in6_mapped_peeraddr(). Inline COMMON_END in tcp_usr_accept() so that we can call in_sockaddr() with temporary copies of the address and port after the PCB is unlocked. Fix the lock violation in tcp6_usr_accept() (caused by calling MALLOC() inside in6_mapped_peeraddr() while the PCB is locked) by changing the implementation of tcp6_usr_accept() to match tcp_usr_accept(). Reviewed by: suz
* Enclose IPv6 addresses in brackets when they are displayed printable with ajmallett2002-08-191-1/+1
| | | | | | | | TCP/UDP port seperated by a colon. This is for the log_in_vain facility. Pointed out by: Edward J. M. Brocklesby Reviewed by: ume MFC after: 2 weeks
* Increase size of ifnet.if_flags from 16 bits (short) to 32 bits (int). To avoidsobomax2002-08-181-1/+1
| | | | | | | breaking application ABI use unused ifreq.ifru_flags[1] for upper 16 bits in SIOCSIFFLAGS and SIOCGIFFLAGS ioctl's. Reviewed by: -hackers, -net
* Introduce support for Mandatory Access Control and extensiblerwatson2002-08-021-0/+5
| | | | | | | | | | kernel access control. When generating nd6 output on an interface, label the packet appropriately. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* correct comment for setsockopt arg size.ume2002-07-251-3/+3
| | | | | | Reported by: Martin Laabs <martin@martin.erfurt.thur.de> Obtained from: KAME MFC after: 1 week
* cleanup usage of ip6_mapped_addr_on and ip6_v6only. now,ume2002-07-252-4/+3
| | | | | | ip6_mapped_addr_on is unified into ip6_v6only. MFC after: 1 week
* Change the default setting of an IPv4-mapped IPv6 address to off.ume2002-07-251-1/+1
| | | | Requested by: many people
* make sure to set/unset INP_IPV4 according to a valueume2002-07-241-0/+4
| | | | | | of IN6P_IPV6_V6ONLY Reviewed by: Keiichi SHIMA <keiichi@iij.ad.jp>
* do not refer to IN6P_BINDV6ONLY anymore.ume2002-07-221-7/+1
| | | | | Obtained from: KAME MFC after: 1 week
* sin6_len is not an address family. I believe this doesn'tume2002-07-221-1/+1
| | | | break compatibility with POSIX.1-2001.
* fixed to make mbuf chain.ume2002-07-181-1/+1
| | | | | Obtained from: KAME MFC after: 1 week
* - fixed a bug that we can't send a packet to ipv4mapped ipv6 addressume2002-07-151-0/+2
| | | | | | | | | | using a udp6 socket without bind(2)ing. - fbsd4/430 reported from the FreeBSD team. - this fix is different from the fix reported in the above PR. i think this better, but we need some test. Obtained from: KAME MFC after: 3 weeks
OpenPOWER on IntegriCloud