Bjoern A. Zeeb 702828f643 frag6: do not leak counter in error cases ... When allocating the IPv6 fragement packet queue entry we do checks against counters and if we pass we increment one of the counters to claim the spot. Right after that we have two cases (malloc and MAC) which can both fail in which case we free the entry but never released our claim on the counter. In theory this can lead to not accepting new fragments after a long time, especially if it would be MAC "refusing" them. Rather than immediately subtracting the value in the error case, only increment it after these two cases so we can no longer leak it. MFC after: 3 weeks Sponsored by: Netflix		2019-10-25 16:29:09 +00:00
..
dest6.c
frag6.c	frag6: do not leak counter in error cases	2019-10-25 16:29:09 +00:00
icmp6.c	Widen NET_EPOCH coverage.	2019-10-07 22:40:05 +00:00
icmp6.h
in6_cksum.c
in6_fib.c
in6_fib.h
in6_gif.c	Add the check that current VNET is ready and access to srchash is allowed.	2018-10-23 13:11:45 +00:00
in6_ifattach.c	Don't cover in6_ifattach() with network epoch, as it may call into	2019-10-13 04:25:16 +00:00
in6_ifattach.h
in6_jail.c
in6_mcast.c	Widen NET_EPOCH coverage.	2019-10-07 22:40:05 +00:00
in6_pcb.c	IPv6 cleanup: kernel	2019-08-02 07:41:36 +00:00
in6_pcb.h	IPv6 cleanup: kernel	2019-08-02 07:41:36 +00:00
in6_pcbgroup.c
in6_proto.c	frag6.c: move variables and sysctls into local file	2019-08-02 10:29:53 +00:00
in6_rmx.c	Use the new VNET_DEFINE_STATIC macro when we are defining static VNET	2018-07-24 16:35:52 +00:00
in6_rss.c
in6_rss.h
in6_src.c	IPv6 cleanup: kernel	2019-08-02 07:41:36 +00:00
in6_var.h	Widen NET_EPOCH coverage.	2019-10-07 22:40:05 +00:00
in6.c	in6ifa_llaonifp() is never called from fast path, so do not require	2019-10-14 15:33:53 +00:00
in6.h	Convert all IPv4 and IPv6 multicast memberships into using a STAILQ	2019-06-25 11:54:41 +00:00
ip6_ecn.h
ip6_fastfwd.c	New pfil(9) KPI together with newborn pfil API and control utility.	2019-01-31 23:01:03 +00:00
ip6_forward.c	Add a missing include of opt_sctp.h.	2019-10-12 22:58:33 +00:00
ip6_gre.c	Add GRE-in-UDP encapsulation support as defined in RFC8086.	2019-04-24 09:05:45 +00:00
ip6_id.c	ip6_randomflowlabel: Avoid blocking if random(4) is not available	2019-04-23 17:18:20 +00:00
ip6_input.c	frag6: fix vnet teardown leak	2019-10-21 08:48:47 +00:00
ip6_mroute.c	Plug some networking sysctl leaks.	2018-11-22 20:49:41 +00:00
ip6_mroute.h
ip6_output.c	ip6_output() has a complex set of gotos, and some can jump out of	2019-10-09 17:02:28 +00:00
ip6_var.h	frag6: replace KAME hand-rolled queues with queue(9) TAILQs	2019-10-23 23:01:18 +00:00
ip6.h
ip6protosw.h
ip_fw_nat64.h	Reapply r345274 with build fixes for 32-bit architectures.	2019-03-19 10:57:03 +00:00
ip_fw_nptv6.h	Add ability to use dynamic external prefix in ipfw_nptv6 module.	2018-11-12 11:20:59 +00:00
mld6_var.h	Fix refcounting leaks in IPv6 MLD code leading to loss of IPv6	2019-01-24 08:34:13 +00:00
mld6.c	Widen NET_EPOCH coverage.	2019-10-07 22:40:05 +00:00
mld6.h
nd6_nbr.c	Execute nd6_dad_timer() in the network epoch, since nd6_dad_duplicated()	2019-10-22 16:06:33 +00:00
nd6_rtr.c	Widen NET_EPOCH coverage.	2019-10-07 22:40:05 +00:00
nd6.c	Don't cover in6_ifattach() with network epoch, as it may call into	2019-10-13 04:25:16 +00:00
nd6.h	Update for IETF draft-ietf-6man-ipv6only-flag.	2019-03-07 23:03:39 +00:00
pim6_var.h
pim6.h
raw_ip6.c	Revert changes to rip6_bind() from r353292. This function is always	2019-10-09 05:52:07 +00:00
raw_ip6.h
route6.c
scope6_var.h
scope6.c	Mechanical cleanup of epoch(9) usage in network stack.	2019-01-09 01:11:19 +00:00
sctp6_usrreq.c	Ensure that the flags indicating IPv4/IPv6 are not changed by failing	2019-10-24 20:05:10 +00:00
sctp6_var.h	Whitespace changes due to changes in ident.	2018-07-19 20:16:33 +00:00
send.c	Use the new VNET_DEFINE_STATIC macro when we are defining static VNET	2018-07-24 16:35:52 +00:00
send.h
tcp6_var.h
udp6_usrreq.c	Ensure that the flags indicating IPv4/IPv6 are not changed by failing	2019-10-24 20:05:10 +00:00
udp6_var.h