d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
2726bbe221
freebsd-nq/sys
History
Daniel Hartmeier 2726bbe221 Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN, 
prevents a possible endless loop in pf_get_sport() with 'static-port'

ICMP state entries use the ICMP ID as port for the unique state key. When
checking for a usable key, construct the key in the same way. Otherwise,
a colliding key might be missed or a state insertion might be refused even
though it could be inserted. The second case triggers the endless loop,
possibly allowing a NATed LAN client to lock up the kernel.

PR:			kern/74930
Reported and tested by:	Hugo Silva, Srebrenko Sehic
MFC after:		3 days
2004-12-19 19:43:04 +00:00
..
alpha In the common case, pmap_enter_quick() completes without sleeping. 2004-12-15 19:55:05 +00:00
amd64 In the common case, pmap_enter_quick() completes without sleeping. 2004-12-15 19:55:05 +00:00
arm Update the StrongArm port to match the current code. 2004-12-18 17:58:49 +00:00
boot The 'start' command processes loader.conf variables, not loader.rc. 2004-12-06 05:30:31 +00:00
cam Correct another location where inquiry length as calculated from the 2004-11-18 07:24:29 +00:00
coda Convert coda to nmount. 2004-12-06 19:46:02 +00:00
compat Do not blindly pass linux filesystem specific mount data across. 2004-12-03 18:14:22 +00:00
conf Add config hooks for amd64 atheros hal modules 2004-12-15 02:21:23 +00:00
contrib Initialise init_addr in pf_map_addr() in the PF_POOL_ROUNDROBIN, 2004-12-19 19:43:04 +00:00
crypto Initiate deorbit burn sequence for 80386 support in FreeBSD: Remove 2004-11-16 20:42:32 +00:00
ddb When printing a stack trace for a thread, also print the pid and tid. 2004-11-23 23:11:47 +00:00
dev Move launching the worker thread from a SYSINIT to the first device's 2004-12-19 19:42:54 +00:00
doc
fs Be a bit more assertive about vnode bypass. 2004-12-14 09:32:18 +00:00
gdb Change gdb_cpu_setreg() to not take the value to which to set the 2004-12-01 06:40:35 +00:00
geom Fix typo in a comment. 2004-12-15 12:18:41 +00:00
gnu Implement simpler panics for VOP_{read,write} on fifos. 2004-12-14 21:30:45 +00:00
i4b Mark i4b IPR and SPPP drivers as NET_NEEDS_GIANT(), as they both 2004-10-12 09:25:52 +00:00
i386 In the common case, pmap_enter_quick() completes without sleeping. 2004-12-15 19:55:05 +00:00
ia64 In the common case, pmap_enter_quick() completes without sleeping. 2004-12-15 19:55:05 +00:00
isa PNP BIOS devices are fundamentally different than ISA PNP devices. 2004-12-07 05:30:02 +00:00
isofs/cd9660 First save from editor, *then* commit. 2004-12-07 15:25:36 +00:00
kern 1. msleep returns EWOULDBLOCK not ETIMEDOUT, use EWOULDBLOCK instead. 2004-12-18 13:43:16 +00:00
libkern Use the RET macro. 2004-11-09 16:47:47 +00:00
modules We already have ng_fec.4 manpage. And sys/modules is not a correct 2004-12-19 16:06:14 +00:00
net don't try to recurse on the bpf lock.. kqueue already locks the bpf lock 2004-12-17 03:21:46 +00:00
net80211 correct module dependency 2004-12-13 18:26:13 +00:00
netatalk Correct a misspelling in a comment. 2004-12-05 13:28:52 +00:00
netatm Initialize struct pr_userreqs in new/sparse style and fill in common 2004-11-08 14:44:54 +00:00
netgraph Assert queue mutex in ng_dequeue() and ng_queue_rw(). 2004-12-19 14:58:13 +00:00
netinet In certain cases ip_output() can free our route, so check 2004-12-10 07:51:14 +00:00
netinet6 In certain cases ip_output() can free our route, so check 2004-12-10 07:51:14 +00:00
netipsec Initialize struct pr_userreqs in new/sparse style and fill in common 2004-11-08 14:44:54 +00:00
netipx Initialize struct pr_userreqs in new/sparse style and fill in common 2004-11-08 14:44:54 +00:00
netkey support TCP-MD5(IPv4) in KAME-IPSEC, too. 2004-11-08 18:49:51 +00:00
netnatm Initialize struct pr_userreqs in new/sparse style and fill in common 2004-11-08 14:44:54 +00:00
netncp Add missing zero flag argument. 2004-10-12 08:22:08 +00:00
netsmb Don't use vn_todev(). 2004-11-10 07:16:59 +00:00
nfs Add non-blocking versions of nfsm_dissect() and friends, for use from 2004-12-06 17:33:52 +00:00
nfs4client Rewrite of the NFS client's reply handling. We now have NFS socket 2004-12-06 21:11:15 +00:00
nfsclient Change the NFS sillyrename convention so that we won't run out 2004-12-16 19:28:37 +00:00
nfsserver Correct a bug in nfsrv_create() where a call to nfsrv_access() might 2004-11-11 21:30:52 +00:00
opencrypto Push Giant down through ioctl. 2004-11-17 09:09:55 +00:00
pc98 Separate mse driver into a core driver and a bus attachments. Separate out 2004-12-12 20:05:50 +00:00
pccard
pci Update the Tigon 1 and 2 driver to use the sf_buf API for implementing 2004-12-06 00:43:40 +00:00
posix4 Back when VOP_* was introduced, we did not have new-style struct 2004-12-01 23:16:38 +00:00
powerpc In the common case, pmap_enter_quick() completes without sleeping. 2004-12-15 19:55:05 +00:00
rpc Prefer C99's __func__ over GCC's __FUNCTION__. 2004-09-23 18:25:46 +00:00
security Add a new sysctl/tunable to mac_portacl: 2004-12-08 11:46:44 +00:00
sparc64 In the common case, pmap_enter_quick() completes without sleeping. 2004-12-15 19:55:05 +00:00
sys 1. make umtx sharable between processes, the way is two or more processes 2004-12-18 12:52:44 +00:00
tools Rather than casting through a (void *) to avoid the aliasing warning, 2004-12-13 07:23:34 +00:00
ufs white space 2004-12-14 21:35:00 +00:00
vm Eliminate another unnecessary call to vm_page_busy(). (See revision 1.333 2004-12-17 18:54:51 +00:00
Makefile