Simon L. B. Nielsen 0a389eab22 Fix ipfw packet matching errors with address tables. ... The ipfw tables lookup code caches the result of the last query. The kernel may process multiple packets concurrently, performing several concurrent table lookups. Due to an insufficient locking, a cached result can become corrupted that could cause some addresses to be incorrectly matched against a lookup table. Submitted by: ru Reviewed by: csjp, mlaier Security: CAN-2005-2019 Security: FreeBSD-SA-05:13.ipfw Correct bzip2 permission race condition vulnerability. Obtained from: Steve Grubb via RedHat Security: CAN-2005-0953 Security: FreeBSD-SA-05:14.bzip2 Approved by: obrien Correct TCP connection stall denial of service vulnerability. A TCP packets with the SYN flag set is accepted for established connections, allowing an attacker to overwrite certain TCP options. Submitted by: Noritoshi Demizu Reviewed by: andre, Mohan Srinivasan Security: CAN-2005-2068 Security: FreeBSD-SA-05:15.tcp Approved by: re (security blanket), cperciva		2005-06-29 21:36:49 +00:00
..
libalias	Libalias incorrectly applies proxy rules to the global divert	2005-06-27 22:21:42 +00:00
accf_data.c	add missing #include <sys/module.h>	2004-05-30 20:27:19 +00:00
accf_http.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
icmp6.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
icmp_var.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
if_atm.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
if_atm.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
if_ether.c	Add hooks into the networking layer to support if_bridge. This changes struct	2005-06-05 03:13:13 +00:00
if_ether.h	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
igmp_var.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
igmp.c	deal with malloc failures	2005-03-26 22:20:22 +00:00
igmp.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
in_cksum.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
in_gif.c	Fix IP(v6) over IP tunneling most likely broken with ifnet changes.	2005-06-20 08:39:30 +00:00
in_gif.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
in_pcb.c	Commit correct version of previous commit (in_pcb.c:1.164). Use the	2005-06-01 11:43:39 +00:00
in_pcb.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
in_proto.c	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
in_rmx.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
in_systm.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
in_var.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
in.c	Use IFF_LOCKGIANT/IFF_UNLOCKGIANT around calls to the interface	2005-06-02 00:04:08 +00:00
in.h	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
ip6.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_carp.c	Fix some long standing bugs in writing to the BPF device attached to	2005-06-26 18:11:11 +00:00
ip_carp.h	Add CARP (Common Address Redundancy Protocol), which allows multiple	2005-02-22 13:04:05 +00:00
ip_divert.c	In div_output() explicitly set m->m_nextpkt to NULL. If divert socket	2005-05-13 11:44:37 +00:00
ip_divert.h	Convert IPDIVERT into a loadable module. This makes use of the dynamic loadability	2004-10-19 21:14:57 +00:00
ip_dummynet.c	Add dummynet(4) support to if_bridge, this code is largely based on bridge.c.	2005-06-10 01:25:22 +00:00
ip_dummynet.h	Add dummynet(4) support to if_bridge, this code is largely based on bridge.c.	2005-06-10 01:25:22 +00:00
ip_ecn.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_ecn.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_encap.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_encap.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_fastfwd.c	Pass icmp_error() the MTU argument directly instead of	2005-05-04 13:09:19 +00:00
ip_fw2.c	Fix ipfw packet matching errors with address tables.	2005-06-29 21:36:49 +00:00
ip_fw_pfil.c	Add IPv6 support to IPFW and Dummynet.	2005-04-18 18:35:05 +00:00
ip_fw.h	Add support for IPv4 only rules to IPFW2 now that it supports IPv6 as well.	2005-06-03 01:10:28 +00:00
ip_gre.c	Stop embedding struct ifnet at the top of driver softcs. Instead the	2005-06-10 16:49:24 +00:00
ip_gre.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_icmp.c	Add another step of 1280 (gif(4) tunnels) to ip_next_mtu().	2005-05-04 13:23:54 +00:00
ip_icmp.h	Pass icmp_error() the MTU argument directly instead of	2005-05-04 13:09:19 +00:00
ip_id.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_input.c	Pass icmp_error() the MTU argument directly instead of	2005-05-04 13:09:19 +00:00
ip_mroute.c	Add back missing copyright and license statement. This is identical	2005-06-23 18:42:58 +00:00
ip_mroute.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip_output.c	Stop embedding struct ifnet at the top of driver softcs. Instead the	2005-06-10 16:49:24 +00:00
ip_var.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ip.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
ipprotosw.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
pim_var.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
pim.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
raw_ip.c	Slight white space tweak.	2005-06-01 11:38:35 +00:00
tcp_debug.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
tcp_debug.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
tcp_fsm.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
tcp_hostcache.c	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
tcp_input.c	Fix ipfw packet matching errors with address tables.	2005-06-29 21:36:49 +00:00
tcp_output.c	Replace t_force with a t_flag (TF_FORCEDATA).	2005-05-21 00:38:29 +00:00
tcp_reass.c	Fix ipfw packet matching errors with address tables.	2005-06-29 21:36:49 +00:00
tcp_sack.c	- Postpone SACK option processing until after PAWS checks. SACK option	2005-06-27 22:27:42 +00:00
tcp_seq.h	- Tighten up the Timestamp checks to prevent a spoofed segment from	2005-04-10 05:24:59 +00:00
tcp_subr.c	Assert tcbinfo lock in tcp_drop() due to its call of tcp_close()	2005-06-01 12:06:07 +00:00
tcp_syncache.c	Remove some code that snuck in by accident.	2005-04-21 20:29:40 +00:00
tcp_timer.c	Replace t_force with a t_flag (TF_FORCEDATA).	2005-05-21 00:38:29 +00:00
tcp_timer.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
tcp_timewait.c	Assert tcbinfo lock in tcp_drop() due to its call of tcp_close()	2005-06-01 12:06:07 +00:00
tcp_usrreq.c	When aborting tcp_attach() due to a problem allocating or attaching the	2005-06-01 12:14:56 +00:00
tcp_var.h	- Postpone SACK option processing until after PAWS checks. SACK option	2005-06-27 22:27:42 +00:00
tcp.h	Rewrite of tcp_sack_option(). Kentaro Kurahone (NetBSD) pointed out	2005-05-23 19:22:48 +00:00
tcpip.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
udp_usrreq.c	De-spl UDP.	2005-06-01 11:24:00 +00:00
udp_var.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00
udp.h	/* -> /*- for license, minor formatting changes	2005-01-07 01:45:51 +00:00