Brian Feldman 88ef2880c1 Validate the action pointer to be within the rule size, so that trying to ...

add corrupt ipfw rules would not potentially panic the system or worse.

2004-09-30 17:42:00 +00:00

..

libalias

Fix outgoing ICMP on global instance.

2004-08-14 14:21:09 +00:00

accf_data.c

…

accf_http.c

…

icmp6.h

…

icmp_var.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

if_atm.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

if_atm.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

if_ether.c

Check flag do_bridge always, even if kernel was compiled without

2004-09-09 12:34:07 +00:00

if_ether.h

…

igmp_var.h

…

igmp.c

…

igmp.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

in_cksum.c

…

in_gif.c

…

in_gif.h

…

in_pcb.c

Assign so_pcb to NULL rather than 0 as it's a pointer.

2004-09-29 04:01:13 +00:00

in_pcb.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

in_proto.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

in_rmx.c

…

in_systm.h

…

in_var.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

in.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

in.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

ip6.h

…

ip_divert.c

fix up socket/ip layer violation... don't assume/know that

2004-09-05 02:34:12 +00:00

ip_divert.h

…

ip_dummynet.c

Allocate memory when dumping pipes with M_WAITOK flag.

2004-08-25 09:31:30 +00:00

ip_dummynet.h

Convert ipfw to use PFIL_HOOKS. This is change is transparent to userland

2004-08-17 22:05:54 +00:00

ip_ecn.c

…

ip_ecn.h

…

ip_encap.c

…

ip_encap.h

…

ip_fastfwd.c

Add an additional struct inpcb * argument to pfil(9) in order to enable

2004-09-29 04:54:33 +00:00

ip_fw2.c

Validate the action pointer to be within the rule size, so that trying to

2004-09-30 17:42:00 +00:00

ip_fw_pfil.c

Add an additional struct inpcb * argument to pfil(9) in order to enable

2004-09-29 04:54:33 +00:00

ip_fw.h

Add an additional struct inpcb * argument to pfil(9) in order to enable

2004-09-29 04:54:33 +00:00

ip_gre.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

ip_gre.h

…

ip_icmp.c

Remove the last two global variables that are used to store packet state while

2004-09-15 20:13:26 +00:00

ip_icmp.h

…

ip_id.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

ip_input.c

Add an additional struct inpcb * argument to pfil(9) in order to enable

2004-09-29 04:54:33 +00:00

ip_mroute.c

Apply error and success logic consistently to the function netisr_queue() and

2004-08-27 18:33:08 +00:00

ip_mroute.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

ip_output.c

Add an additional struct inpcb * argument to pfil(9) in order to enable

2004-09-29 04:54:33 +00:00

ip_var.h

Remove the last two global variables that are used to store packet state while

2004-09-15 20:13:26 +00:00

ip.h

…

ipprotosw.h

…

pim_var.h

…

pim.h

…

raw_ip.c

fix up socket/ip layer violation... don't assume/know that

2004-09-05 02:34:12 +00:00

tcp_debug.c

…

tcp_debug.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

tcp_fsm.h

…

tcp_hostcache.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

tcp_input.c

Convert ipfw to use PFIL_HOOKS. This is change is transparent to userland

2004-08-17 22:05:54 +00:00

tcp_output.c

fix up socket/ip layer violation... don't assume/know that

2004-09-05 02:34:12 +00:00

tcp_reass.c

Convert ipfw to use PFIL_HOOKS. This is change is transparent to userland

2004-08-17 22:05:54 +00:00

tcp_sack.c

Convert ipfw to use PFIL_HOOKS. This is change is transparent to userland

2004-08-17 22:05:54 +00:00

tcp_seq.h

…

tcp_subr.c

fix up socket/ip layer violation... don't assume/know that

2004-09-05 02:34:12 +00:00

tcp_syncache.c

Remove the last two global variables that are used to store packet state while

2004-09-15 20:13:26 +00:00

tcp_timer.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

tcp_timer.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

tcp_timewait.c

fix up socket/ip layer violation... don't assume/know that

2004-09-05 02:34:12 +00:00

tcp_usrreq.c

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

tcp_var.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

tcp.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

tcpip.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

udp_usrreq.c

fix up socket/ip layer violation... don't assume/know that

2004-09-05 02:34:12 +00:00

udp_var.h

White space cleanup for netinet before branch:

2004-08-16 18:32:07 +00:00

udp.h

…