d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8351d04f34
freebsd-nq/sys
History
Gleb Smirnoff 8351d04f34 When a packet has been reinjected into ipfw(4) after dummynet(4) processing 
we have a non-NULL args.rule. If the same packet later is subject to "tee"
rule, its original is sent again into ipfw_chk() and it reenters at the same
rule. This leads to infinite loop and frozen router.

Assign args.rule to NULL, any time we are going to send packet back to
ipfw_chk() after a tee rule. This is a temporary workaround, which we
will leave for RELENG_5. In HEAD we are going to make divert(4) save
next rule the same way as dummynet(4) does.

PR:		kern/79546
Submitted by:	Oleg Bulyzhin
Reviewed by:	maxim, andre
MFC after:	3 days
2005-04-06 14:00:33 +00:00
..
alpha Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
amd64 Fully initialize the required TSS fields so that the io permission 2005-04-06 01:05:51 +00:00
arm Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
boot Fix buidling of boot blocks for pc98 with new links. 2005-04-03 04:58:15 +00:00
bsm Add a stub audit_kevents.h, which defines exactly one audit event: 2005-02-02 14:27:36 +00:00
cam avoid use after free 2005-03-31 21:43:19 +00:00
coda Explicitly hold a reference to the cdev we have just cloned. This 2005-03-31 12:19:44 +00:00
compat Fix 32 bit signals on amd64. It turns out that I was sign extending 2005-04-05 22:41:49 +00:00
conf Re-enable the atapicam driver in NOTES. 2005-04-05 02:05:38 +00:00
contrib This commit was generated by cvs2svn to compensate for changes in r143439, 2005-03-12 00:17:37 +00:00
crypto gbde(8) is also rejndael user. 2005-03-11 22:07:04 +00:00
ddb Start each of the license/copyright comments with /*- 2005-01-06 01:34:41 +00:00
dev Add support for controllers that doesn't have the usual taskfile 2005-04-06 10:22:56 +00:00
doc
fs - Fix union's assumptions about when the dvp is unlocked. It is only 2005-04-04 09:36:26 +00:00
gdb check return value of gdb_rx_varhex 2005-03-28 18:31:18 +00:00
geom - Add a missing g_io_deliver() in case of allocation failure - we didn't 2005-04-03 14:55:49 +00:00
gnu - Remove wantparent, it is no longer necessary. An assert in vfs_lookup.c 2005-03-29 13:09:42 +00:00
i4b Add device ID for Planet IA 128P-STD card. 2005-03-19 03:00:22 +00:00
i386 Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
ia64 Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
isa - Don't enable periodic interrupts from the RTC by default in rtc_statusb. 2005-03-24 21:34:16 +00:00
isofs/cd9660 - We no longer have to bother with PDIRUNLOCK, lookup() handles it for us. 2005-03-28 09:34:36 +00:00
kern Constify hexdump() harder. 2005-04-06 10:14:13 +00:00
libkern Replace the current strspn() and strcspn() with significantly faster 2005-04-02 18:52:44 +00:00
modules Connect the atapicam module to the build. 2005-04-05 02:05:01 +00:00
net Explicitly hold a reference to the cdev we have just cloned. This 2005-03-31 12:19:44 +00:00
net80211 remove extern from function decls 2005-04-04 04:27:20 +00:00
netatalk When generating a phase II ARP lookup from aarpwhohas(), use a 2005-02-22 14:37:22 +00:00
netatm In the current world order, solisten() implements the state transition of 2005-02-21 21:58:17 +00:00
netgraph Major overhaul and cleanup of ng_source node. 2005-04-05 17:22:05 +00:00
netinet When a packet has been reinjected into ipfw(4) after dummynet(4) processing 2005-04-06 14:00:33 +00:00
netinet6 check for malloc failure (also move malloc up to simplify error recovery) 2005-03-29 01:26:27 +00:00
netipsec correct space check 2005-03-09 15:28:48 +00:00
netipx Marginally reformat my copyright statement to remove the spurious ','. 2005-03-10 14:19:31 +00:00
netkey fixed an unexpected addr/port matching failure in IPv6 SA management 2005-01-10 13:06:42 +00:00
netnatm Mark netatm and netnatm explicitly as requiring Giant, as they still do. 2005-02-17 14:21:22 +00:00
netncp avoid potential null ptr derefs 2005-02-23 22:44:38 +00:00
netsmb Explicitly hold a reference to the cdev we have just cloned. This 2005-03-31 12:19:44 +00:00
nfs /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
nfs4client - Remove wantparent, it is no longer necessary. An assert in vfs_lookup.c 2005-03-29 13:09:42 +00:00
nfsclient - LK_NOPAUSE is a nop now. 2005-03-31 04:37:09 +00:00
nfsserver avoid potential null ptr deref by free'ing excess mbufs instead of 2005-03-28 18:51:58 +00:00
opencrypto just use crypto/rijndael, and nuke opencrypto/rindael.[ch]. 2005-03-11 17:24:46 +00:00
pc98 Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
pccard Remove more deadwood that never got implemented in NEWCARD, since NEWCARD 2005-02-15 02:54:53 +00:00
pci nVidia AGP chipsets beyond nForce2 are AMD64-specific. 2005-04-02 01:10:09 +00:00
posix4 Actually commit the code for kern_sched_get_rr_interval(). 2005-03-31 22:54:48 +00:00
powerpc Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
rpc - Don't call rpcclnt_realign() if we don't have any mbufs to realign. 2005-03-19 01:16:25 +00:00
security Remove an accidental clearing of the new label pointer on a system V 2005-02-24 16:08:41 +00:00
sparc64 Divorce critical sections from spinlocks. Critical sections as denoted by 2005-04-04 21:53:56 +00:00
sys Constify hexdump() harder. 2005-04-06 10:14:13 +00:00
tools Add VOP_FOO_APV() which takes a pointer to the vop_vector. 2005-02-08 12:54:32 +00:00
ufs - Consistently call 'vp' vp rather than ovp sometimes in ffs_truncate(). 2005-04-05 08:49:41 +00:00
vm Flip the switch and turn mpsafevm on by default for sparc64. 2005-04-04 20:59:02 +00:00
Makefile When building cscopnamefile, default architecture to ${MACHINE}, not i386. 2005-03-08 00:09:41 +00:00