Qing Li fc02323563 In the ARP callout timer expiration function, the current time_second ...

is compared against the entry expiration time value (that was set based
on time_second) to check if the current time is larger than the set
expiration time. Due to the +/- timer granularity value, the comparison
returns false, causing the alternative code to be executed. The
alternative code path freed the memory without removing that entry
from the table list, causing a use-after-free bug.

Reviewed by:	discussed with kmacy
MFC after:	immediately
Verified by:	rnoland, yongari

2009-10-20 17:55:42 +00:00

..

ipfw

Virtualize the pfil hooks so that different jails may chose different

2009-10-11 05:59:43 +00:00

libalias

What's the point of adjusting a checksum if we are going to toss the

2009-04-11 15:26:31 +00:00

accf_data.c

Rework socket upcalls to close some races with setup/teardown of upcalls.

2009-06-01 21:17:03 +00:00

accf_dns.c

Rework socket upcalls to close some races with setup/teardown of upcalls.

2009-06-01 21:17:03 +00:00

accf_http.c

Rework socket upcalls to close some races with setup/teardown of upcalls.

2009-06-01 21:17:03 +00:00

icmp6.h

Many network stack subsystems use a single global data structure to hold

2009-08-02 19:43:32 +00:00

icmp_var.h

Many network stack subsystems use a single global data structure to hold

2009-08-02 19:43:32 +00:00

if_atm.c

This main goals of this project are:

2008-12-15 06:10:57 +00:00

if_atm.h

…

if_ether.c

In the ARP callout timer expiration function, the current time_second

2009-10-20 17:55:42 +00:00

if_ether.h

Add arp_update_event. This replaces route_arp_update_event, which

2009-09-08 21:17:17 +00:00

igmp_var.h

Update stats in struct igmpstat using two new macros:

2009-04-12 13:41:13 +00:00

igmp.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

igmp.h

These are no longer referenced in the tree, so can be safely removed.

2009-06-10 18:12:15 +00:00

in_cksum.c

…

in_gif.c

Many network stack subsystems use a single global data structure to hold

2009-08-02 19:43:32 +00:00

in_gif.h

…

in_mcast.c

Return ENOBUFS consistently if user attempts to exceed

2009-09-18 15:12:31 +00:00

in_pcb.c

Previously local end of point-to-point interface is not reachable

2009-09-14 22:19:47 +00:00

in_pcb.h

Add padding to struct inpcb, missed during our padding sweep earlier in

2009-08-02 22:47:08 +00:00

in_proto.c

Get SCTP working in combination with VIMAGE.

2009-09-19 14:02:16 +00:00

in_rmx.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

in_systm.h

Use uint32_t instead of n_long and n_time, and uint16_t instead of n_short.

2009-02-13 15:14:43 +00:00

in_var.h

Remove unused VNET_SET() and related macros; only VNET_GET() is

2009-07-16 21:13:04 +00:00

in.c

This patch fixes the following issues in the ARP operation:

2009-10-15 06:12:04 +00:00

in.h

Move the duplicate definition of struct sockaddr_storage to its own

2009-09-08 10:39:38 +00:00

ip6.h

Start removing IPv6 Type 0 Routing header code.

2009-03-03 13:12:12 +00:00

ip_carp.c

Fix CARP memory leaks on carp_if's malloc'd using M_CARP. This occurs when

2009-08-20 02:33:12 +00:00

ip_carp.h

Update stats in struct carpstats using two new macros: CARPSTATS_ADD()

2009-04-12 14:19:37 +00:00

ip_divert.c

Introduce a div_destroy() function which takes over per-vnet cleanup tasks

2009-08-24 10:06:02 +00:00

ip_divert.h

Introduce a div_destroy() function which takes over per-vnet cleanup tasks

2009-08-24 10:06:02 +00:00

ip_dummynet.h

- fix dummynet 'fast' mode for WF2Q case.

2009-06-24 22:57:07 +00:00

ip_ecn.c

…

ip_ecn.h

…

ip_encap.c

…

ip_encap.h

…

ip_fastfwd.c

Virtualize the pfil hooks so that different jails may chose different

2009-10-11 05:59:43 +00:00

ip_fw.h

Fix ipfw's initialization functions to get the correct order of evaluation

2009-08-21 11:20:10 +00:00

ip_gre.c

Enqueue de-capsulated packet instead of performing direct dispatch. It's

2008-07-04 21:01:30 +00:00

ip_gre.h

…

ip_icmp.c

Compare pointer to NULL rather than 0.

2009-10-13 20:29:14 +00:00

ip_icmp.h

Use uint32_t instead of n_long and n_time, and uint16_t instead of n_short.

2009-02-13 15:14:43 +00:00

ip_id.c

Rather than using hidden includes (with cicular dependencies),

2008-12-02 21:37:28 +00:00

ip_input.c

Rewrap ip_input() comment so that it prints more nicely.

2009-10-18 11:23:56 +00:00

ip_ipsec.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

ip_ipsec.h

Only four out of nine arguments for ip_ipsec_output() are actually used.

2009-06-05 23:53:17 +00:00

ip_mroute.c

In expire_mfc(), add an assert on the multicast forwarding cache mutex.

2009-09-13 01:00:24 +00:00

ip_mroute.h

Switch cmd argument to u_long. This matches what if_ethersubr.c does and

2009-06-21 10:29:31 +00:00

ip_options.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

ip_options.h

Add function ip_checkrouteralert(), which will be used

2009-03-04 02:51:22 +00:00

ip_output.c

Virtualize the pfil hooks so that different jails may chose different

2009-10-11 05:59:43 +00:00

ip_var.h

Virtualize the pfil hooks so that different jails may chose different

2009-10-11 05:59:43 +00:00

ip.h

Use uint32_t instead of n_long and n_time, and uint16_t instead of n_short.

2009-02-13 15:14:43 +00:00

pim_var.h

Update stats in struct pimstat using two new macros: PIMSTAT_ADD()

2009-04-12 14:06:26 +00:00

pim.h

…

raw_ip.c

Virtualize the pfil hooks so that different jails may chose different

2009-10-11 05:59:43 +00:00

sctp_asconf.c

Support for VNET in SCTP (hopefully)

2009-09-17 15:11:12 +00:00

sctp_asconf.h

Code from the hack-session known as the IETF (and a

2008-12-06 13:19:54 +00:00

sctp_auth.c

Turns out that when a receiver forwards through its TNS's the

2009-07-28 14:09:06 +00:00

sctp_auth.h

Code from the hack-session known as the IETF (and a

2008-12-06 13:19:54 +00:00

sctp_bsd_addr.c

Fix a race condition where a mutex was destroyed while sleeping on it.

2009-10-11 12:23:56 +00:00

sctp_bsd_addr.h

1) Adds the rest of the VIMAGE change macros

2008-07-09 16:45:30 +00:00

sctp_cc_functions.c

- Macro-izes the packed declaration in all headers.

2008-06-14 07:58:05 +00:00

sctp_cc_functions.h

1) Adds the rest of the VIMAGE change macros

2008-07-09 16:45:30 +00:00

sctp_constants.h

Fixes several PR-SCTP releated bugs.

2009-03-14 13:42:13 +00:00

sctp_crc32.c

repository sync to multi-OS repo ... spaceing change

2009-05-07 16:43:49 +00:00

sctp_crc32.h

This commit fixes the issue with alias_sctp.c. No

2009-02-14 11:34:57 +00:00

sctp_header.h

Add the add-stream capability. Still needs more

2009-02-20 15:03:54 +00:00

sctp_indata.c

This fixes a bug where the value set by SCTP_PARTIAL_DELIVERY_POINT

2009-08-24 11:46:40 +00:00

sctp_indata.h

Code from the hack-session known as the IETF (and a

2008-12-06 13:19:54 +00:00

sctp_input.c

Support for VNET in SCTP (hopefully)

2009-09-17 15:11:12 +00:00

sctp_input.h

1) Adds the rest of the VIMAGE change macros

2008-07-09 16:45:30 +00:00

sctp_lock_bsd.h

- Make strict-sacks be the default.

2008-08-28 09:44:07 +00:00

sctp_os_bsd.h

Correct include order as indicated by bz.

2009-10-10 13:59:18 +00:00

sctp_os.h

…

sctp_output.c

Use correct arguments when calling SCTP_RTALLOC().

2009-10-08 20:33:12 +00:00

sctp_output.h

Fix the add stream feature of strm-reset to really work:

2009-02-27 20:54:45 +00:00

sctp_pcb.c

Fix a race condition where a mutex was destroyed while sleeping on it.

2009-10-11 12:23:56 +00:00

sctp_pcb.h

Support for VNET in SCTP (hopefully)

2009-09-17 15:11:12 +00:00

sctp_peeloff.c

- Macro-izes the packed declaration in all headers.

2008-06-14 07:58:05 +00:00

sctp_peeloff.h

…

sctp_structs.h

Get SCTP working in combination with VIMAGE.

2009-09-19 14:02:16 +00:00

sctp_sysctl.c

Get SCTP working in combination with VIMAGE.

2009-09-19 14:02:16 +00:00

sctp_sysctl.h

Fix a bug where wrong initialization value

2009-07-28 15:07:41 +00:00

sctp_timer.c

Support for VNET in SCTP (hopefully)

2009-09-17 15:11:12 +00:00

sctp_timer.h

Invariants changes that make more sense.

2008-10-27 13:53:31 +00:00

sctp_uio.h

Get rid of unused field. This will also be deleted

2009-07-27 12:09:32 +00:00

sctp_usrreq.c

Support for VNET in SCTP (hopefully)

2009-09-17 15:11:12 +00:00

sctp_var.h

Fixes several PR-SCTP releated bugs.

2009-03-14 13:42:13 +00:00

sctp.h

Changes to the NR-Sack code so that:

2009-06-17 12:34:56 +00:00

sctputil.c

Get SCTP working in combination with VIMAGE.

2009-09-19 14:02:16 +00:00

sctputil.h

* Fix a bug where PR-SCTP settings are ignore when using implicit

2009-08-15 21:10:52 +00:00

tcp_debug.c

Remove the "The option TCPDEBUG requires option INET." requirement.

2009-06-10 10:39:41 +00:00

tcp_debug.h

Use uint32_t instead of n_long and n_time, and uint16_t instead of n_short.

2009-02-13 15:14:43 +00:00

tcp_fsm.h

…

tcp_hostcache.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

tcp_hostcache.h

Add an essential .h file that skipped from the last commit (r185419).

2008-11-28 23:39:25 +00:00

tcp_input.c

Remove tcp_input lock statistics; these are intended for debugging only

2009-10-06 20:35:41 +00:00

tcp_lro.c

Don't calculate checksum if it has already been validated

2008-08-24 02:31:09 +00:00

tcp_lro.h

Add generic TCP LOR into netinet

2008-06-11 22:12:50 +00:00

tcp_offload.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

tcp_offload.h

Replace struct tcpopt with a proxy toeopt struct in the TOE driver interface to

2009-07-13 11:51:02 +00:00

tcp_output.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

tcp_reass.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

tcp_sack.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

tcp_seq.h

…

tcp_subr.c

Add the ability to see TCP timers via netstat -x. This can be a useful

2009-09-16 05:33:15 +00:00

tcp_syncache.c

Merge the remainder of kern_vimage.c and vimage.h into vnet.c and

2009-08-01 19:26:27 +00:00

tcp_syncache.h

Replace struct tcpopt with a proxy toeopt struct in the TOE driver interface to

2009-07-13 11:51:02 +00:00

tcp_timer.c

Add the ability to see TCP timers via netstat -x. This can be a useful

2009-09-16 05:33:15 +00:00

tcp_timer.h

Add the ability to see TCP timers via netstat -x. This can be a useful

2009-09-16 05:33:15 +00:00

tcp_timewait.c

Fix signed comparison bug when ticks goes negative after 24 days of

2009-08-20 22:53:28 +00:00

tcp_usrreq.c

-Put the optimized soreceive_stream() under a compile time option called

2009-09-15 22:23:45 +00:00

tcp_var.h

Add the ability to see TCP timers via netstat -x. This can be a useful

2009-09-16 05:33:15 +00:00

tcp.h

add rcv_nxt, snd_nxt, and toe offload id to FreeBSD-specific

2008-05-05 20:13:31 +00:00

tcpip.h

…

toedev.h

Don't check if an interface can do tcp offload if there are no offload devices registered on the system.

2008-09-01 05:30:22 +00:00

udp_usrreq.c

Many network stack subsystems use a single global data structure to hold

2009-08-02 19:43:32 +00:00

udp_var.h

Many network stack subsystems use a single global data structure to hold

2009-08-02 19:43:32 +00:00

udp.h

Added support for NAT-Traversal (RFC 3948) in IPsec stack.

2009-06-12 15:44:35 +00:00