freebsd-nq/sys/netinet6
Dag-Erling Smørgrav 1a05c762b9 Fix the length calculation for the final block of a sendfile(2)
transmission which could be tricked into rounding up to the nearest
page size, leaking up to a page of kernel memory.  [13:11]

In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
and SIOCSIFNETMASK at the socket layer rather than pass them on to the
link layer without validation or credential checks.  [SA-13:12]

Prevent cross-mount hardlinks between different nullfs mounts of the
same underlying filesystem.  [SA-13:13]

Security:	CVE-2013-5666
Security:	FreeBSD-SA-13:11.sendfile
Security:	CVE-2013-5691
Security:	FreeBSD-SA-13:12.ifioctl
Security:	CVE-2013-5710
Security:	FreeBSD-SA-13:13.nullfs
Approved by:	re
2013-09-10 10:05:59 +00:00
..
dest6.c
frag6.c
icmp6.c - Use time_uptime instead of time_second in data structures for 2013-08-05 20:13:02 +00:00
icmp6.h
in6_cksum.c
in6_gif.c
in6_gif.h
in6_ifattach.c Fix a panic in tmpaddrtimer. 2013-08-05 00:36:12 +00:00
in6_ifattach.h
in6_mcast.c Fix an integer overflow in computing the size of a temporary buffer 2013-08-22 00:51:37 +00:00
in6_pcb.c A complete duplication of binding should be allowed if on both new and 2013-07-12 19:08:33 +00:00
in6_pcb.h
in6_pcbgroup.c
in6_proto.c Migrate structs ip6stat, icmp6stat and rip6stat to PCPU counters. 2013-07-09 09:54:54 +00:00
in6_rmx.c
in6_src.c
in6_var.h Migrate structs in6_ifstat and icmp6_ifstat to PCPU counters. 2013-07-09 09:59:46 +00:00
in6.c Fix the length calculation for the final block of a sendfile(2) 2013-09-10 10:05:59 +00:00
in6.h - Use time_uptime instead of time_second in data structures for 2013-08-05 20:13:02 +00:00
ip6_ecn.h
ip6_forward.c - Use time_uptime instead of time_second in data structures for 2013-08-05 20:13:02 +00:00
ip6_id.c - Use time_uptime instead of time_second in data structures for 2013-08-05 20:13:02 +00:00
ip6_input.c Implement the ip, tcp, and udp DTrace providers. The probe definitions use 2013-08-25 21:54:41 +00:00
ip6_ipsec.c
ip6_ipsec.h
ip6_mroute.c Use an unsigned long when indexing into mfchashtbl[] and mf6ctable[]. This 2013-09-05 14:16:37 +00:00
ip6_mroute.h Prepare network statistics structures for migration to PCPU counters. 2013-07-09 09:32:06 +00:00
ip6_output.c Restructure the mbuf pkthdr to make it fit for upcoming capabilities and 2013-08-24 19:51:18 +00:00
ip6_var.h Move the global M_SKIP_FIREWALL mbuf flags to a protocol layer specific 2013-08-19 11:08:36 +00:00
ip6.h
ip6protosw.h
mld6_var.h
mld6.c Restructure the mbuf pkthdr to make it fit for upcoming capabilities and 2013-08-24 19:51:18 +00:00
mld6.h
nd6_nbr.c
nd6_rtr.c - Use time_uptime instead of time_second in data structures for 2013-08-05 20:13:02 +00:00
nd6.c Implement the ip, tcp, and udp DTrace providers. The probe definitions use 2013-08-25 21:54:41 +00:00
nd6.h
pim6_var.h Remove most of the remaining sysctl name list macros. They were only 2013-08-26 18:16:05 +00:00
pim6.h
raw_ip6.c Remove the large part of struct ipsecstat. Only few fields of this 2013-07-23 14:14:24 +00:00
raw_ip6.h Migrate structs ip6stat, icmp6stat and rip6stat to PCPU counters. 2013-07-09 09:54:54 +00:00
route6.c
scope6_var.h
scope6.c
sctp6_usrreq.c Provide human readable debug output. 2013-08-25 12:44:03 +00:00
sctp6_var.h
send.c Implement the ip, tcp, and udp DTrace providers. The probe definitions use 2013-08-25 21:54:41 +00:00
send.h
tcp6_var.h
udp6_usrreq.c Implement the ip, tcp, and udp DTrace providers. The probe definitions use 2013-08-25 21:54:41 +00:00
udp6_var.h