Luigi Rizzo 6167e6c88f in ip_dn_ctl(), do not allocate a large structure on the stack, ...

and use malloc() instead if/when it is necessary.

The problem is less relevant in previous versions because
the variable involved (tmp_pipe) is much smaller there.
Still worth fixing though.

Submitted by:	Marta Carbone (GSOC)
MFC after:	3 days

2009-06-10 10:47:31 +00:00

..

ip_dummynet.c

in ip_dn_ctl(), do not allocate a large structure on the stack,

2009-06-10 10:47:31 +00:00

ip_fw2.c

small simplifications to the code in charge of reaping deleted rules:

2009-06-10 10:34:59 +00:00

ip_fw_nat.c

…

ip_fw_pfil.c

Close long existed race with net.inet.ip.fw.one_pass = 0:

2009-06-09 21:27:11 +00:00