freebsd-nq/sys/netgraph
Yaroslav Tykhiy 875467fafa There are two modes of ng_pppoe operation, standard and
nonstandard.  They differ in the values of certain fields in
the PPPoE frame.  Previously, ng_pppoe would start in standard
mode, yet switch to nonstandard one upon reception of a single
nonstandard frame.  After having done so, ng_pppoe would be unable
to interact with standard PPPoE peers.  Thus, a DoS condition
existed that could be triggered by a buggy peer or malicious party.

Since few people have expressed their displeasure WRT this problem,
the default operation of ng_pppoe is left untouched for now.  However,
a new value for the sysctl net.graph.nonstandard_pppoe is introduced,
-1, which will force ng_pppoe stay in standard mode regardless of any
bogus frames floating around.

PR:		kern/47920
Submitted by:	Gleb Smirnoff <glebius <at> cell.sick.ru>
MFC after:	1 week
2003-12-18 16:38:35 +00:00
..
atm Pass MTX_DEF instead of 0 as the last argument to mtx_init(). 2003-12-15 01:36:54 +00:00
bluetooth Introduce a MAC label reference in 'struct inpcb', which caches 2003-11-18 00:39:07 +00:00
netgraph.h Double length of node names, hook names, command strings and types. Add 2003-11-12 09:10:11 +00:00
ng_async.c
ng_async.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_base.c The last argument to mtx_init() should be MTX_DEF, not 0. This is not a 2003-12-08 01:18:04 +00:00
ng_bpf.c
ng_bpf.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_bridge.c Removed an outdated comment. 2003-12-18 09:16:40 +00:00
ng_bridge.h
ng_cisco.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_cisco.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_device.c Gigacommit to improve device-driver source compatibility between 2003-03-03 12:15:54 +00:00
ng_device.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_echo.c
ng_echo.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_eiface.c Use the (now standard) Ethernet address parse type. 2003-12-17 13:03:32 +00:00
ng_eiface.h Use the (now standard) Ethernet address parse type. 2003-12-17 13:03:32 +00:00
ng_etf.c Fixed two memory leaks. 2003-11-17 19:13:44 +00:00
ng_etf.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_ether.c Made the Ethernet address parse type standard. 2003-12-17 12:40:34 +00:00
ng_ether.h Made the Ethernet address parse type standard. 2003-12-17 12:40:34 +00:00
ng_fec.c Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
ng_fec.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_frame_relay.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_frame_relay.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_gif_demux.c Finish driving a stake through the heart of netns and the associated 2003-03-05 19:24:24 +00:00
ng_gif_demux.h Finish driving a stake through the heart of netns and the associated 2003-03-05 19:24:24 +00:00
ng_gif.c Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
ng_gif.h
ng_hole.c
ng_hole.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_iface.c Replace the if_name and if_unit members of struct ifnet with new members 2003-10-31 18:32:15 +00:00
ng_iface.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_ip_input.c Update netisr handling; Each SWI now registers its queue, and all queue 2003-03-04 23:19:55 +00:00
ng_ip_input.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_ksocket.c Replaced two bzero() calls with the M_ZERO flag to malloc(). 2003-12-17 11:48:18 +00:00
ng_ksocket.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_l2tp.c Don't use ovbcopy(). 2003-04-04 12:12:34 +00:00
ng_l2tp.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_lmi.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_lmi.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_message.h Bump the netgraph header version to 6 for the change of the name 2003-11-12 17:03:40 +00:00
ng_mppc.c Take the rc4 code out of ng_mppc module so we don't fail to load when 2003-02-05 19:11:11 +00:00
ng_mppc.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_one2many.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_one2many.h
ng_parse.c Made the Ethernet address parse type standard. 2003-12-17 12:40:34 +00:00
ng_parse.h Made the Ethernet address parse type standard. 2003-12-17 12:40:34 +00:00
ng_ppp.c Deprecate machine/limits.h in favor of new sys/limits.h. 2003-04-29 13:36:06 +00:00
ng_ppp.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_pppoe.c There are two modes of ng_pppoe operation, standard and 2003-12-18 16:38:35 +00:00
ng_pppoe.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_pptpgre.c Lower the maximum ACK timeout for GRE packets from 10 to 1 second. 2003-11-18 20:43:23 +00:00
ng_pptpgre.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_rfc1490.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_rfc1490.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_sample.c
ng_sample.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_socket.c Introduce a MAC label reference in 'struct inpcb', which caches 2003-11-18 00:39:07 +00:00
ng_socket.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_socketvar.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_source.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_source.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_split.c
ng_split.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_tee.c Allow the caller to get an erro direclty if we sent the packet immediatly. 2003-07-03 22:09:47 +00:00
ng_tee.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_tty.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_tty.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_UI.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_UI.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
ng_vjc.c Back out M_* changes, per decision of the TRB. 2003-02-19 05:47:46 +00:00
ng_vjc.h Use a single style of multiple inclusion protection for Netgraph headers. 2003-11-11 12:30:37 +00:00
NOTES