d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
121,365 Commits 4 Branches 49 Tags 2 GiB
d7fc1b7da4
Commit Graph

543 Commits

Author SHA1 Message Date
rwatson
e4a63cbf9b When storing the results of malloc() in a pointer to a pointer, check 
the pointer to a pointer for NULL, not the pointer for NULL.

Noticed by:	Coverity Prevent analysis tool
MFC after:	3 days
 2006-01-14 00:09:41 +00:00
rwatson
e68bf7df89 In ipcomp6_input(), check 'md' not 'm' after a call to m_pulldown(): 'm' 
may be a stale pointer at this point, and we're interested in whether or
not m_pulldown() failed.

Noticed by:	Coverity Prevent analysis tool
MFC after:	3 days
 2006-01-13 23:53:23 +00:00
suz
b08b7ed729 added a note about the assumption for m->m_pkthdr.rcvif 
Obtained from: KAME
MFC After: 1 day
 2006-01-09 09:08:43 +00:00
thompsa
42c9ecf9f5 Add RFC 3378 EtherIP support. This change makes it possible to add gif 
interfaces to bridges, which will then send and receive IP protocol 97 packets.
Packets are Ethernet frames with an EtherIP header prepended.

Obtained from:	NetBSD
MFC after:	2 weeks
 2005-12-21 21:29:45 +00:00
suz
4f9b449956 fixed a kernel crash at the initialization time of PIM-SM register interface 
MFC after: 2 days
 2005-12-09 04:42:19 +00:00
ume
371ea788ce the response NS to a DAD NS was not sent correctly due to the 
invalid destination address.

Submitted by:	JINMEI Tatuya <jinmei__at__isl.rdc.toshiba.co.jp>
MFC after:	1 day
 2005-12-08 06:43:39 +00:00
suz
8bd0824bbf fixed a kernel crash due to an improper removal of callout-timer 
(ToDo: similar fix is necessary for other NDP-related callout-timers
 in netinet6/nd6*.c)

PR: kern/88725
MFC after: 1 month
 2005-11-16 12:36:08 +00:00
ru
dcace5669d Use sparse initializers for "struct domain" and "struct protosw", 
so they are easier to follow for the human being.
 2005-11-09 13:29:16 +00:00
suz
419a678b5e statically configured IPv6 address is properly added/deleted now 
Obtained from: KAME
Reported in: freebsd-net@freebsd
MFC after: 1 day
 2005-10-31 23:06:04 +00:00
suz
55b3e47503 fixed a compilation failure on amd64/sparc64/ia64 
Submitted by: max
MFC after: 2 month
 2005-10-22 05:07:16 +00:00
suz
dc8c97e7dc nuked non-existing commands 2005-10-21 16:31:39 +00:00
suz
c2b19f24a4 sync with KAME regarding NDP 
- introduced fine-grain-timer to manage ND-caches and IPv6 Multicast-Listeners
- supports Router-Preference <draft-ietf-ipv6-router-selection-07.txt>
- better prefix lifetime management
- more spec-comformant DAD advertisement
- updated RFC/internet-draft revisions

Obtained from: KAME
Reviewed by: ume, gnn
MFC after: 2 month
 2005-10-21 16:23:01 +00:00
suz
6ee4447c50 perform NUD on an IPv6-aware point-to-point interface 
Obtained from: KAME
MFC after: 1 week
 2005-10-21 15:59:00 +00:00
suz
f77be35fb4 sync with KAME (renamed a macro IPV6_DADOUTPUT to IPV6_UNSPECSRC) 
Obtained from: KAME
 2005-10-21 15:45:13 +00:00
suz
69d53f9967 sync with KAME (nuked unused code, use NULL to denote a NULL pointer) 
Obtained from: KAME
Reviewed by: ume, gnn
 2005-10-19 17:18:49 +00:00
suz
412574c368 sync with KAME (removed a unnecesary non-standard macro) 
Obtained from: KAME
Reviewd by: ume, gnn
 2005-10-19 16:53:24 +00:00
suz
0fd6aaa3c7 sync with KAME regarding the following clarification in RFC3542: 
- disable IPv6 operation if DAD fails for some EUI-64 link-local addresses.
 - export get_hw_ifid() (and rename it) as a subroutine for this process.

Obtained from: KAME
Reviewd by: ume, gnn
MFC after: 2 week
 2005-10-19 16:43:57 +00:00
suz
c8197b6e73 sync with KAME (don't respond to NI_QTYPE_IPV4ADDR) 
Obtained from: KAME
Reviewed by: ume, gnn
 2005-10-19 16:27:33 +00:00
suz
44730c0a96 supported an ndp command suboption to disable IPv6 in the given interface 
Obtained from: KAME
Reviewd by: ume, gnn
MFC after: 2 week
 2005-10-19 16:20:18 +00:00
suz
7cb7aed97b added an ioctl option in kernel so that ndp/rtadvd can change some NDP-related kernel variables based on their configurations (RFC2461 p.43 6.2.1 mandates this for IPv6 routers) 
Obtained from: KAME
Reviewd by: ume, gnn
MFC after: 2 weeks
 2005-10-19 15:05:42 +00:00
suz
21f42e535f sync with KAME in the following points: 
- fixed typos
- improved some comment descriptions
- use NULL, instead of 0, to denote a NULL pointer
- avoid embedding a magic number in the code
- use nd6log() instead of log() to record NDP-specific logs
- nuked an unnecessay white space

Obtained from: KAME
MFC after:  1 day
 2005-10-19 10:09:19 +00:00
suz
897c7e4265 Raw IPv6 checksum must use the protocol number of the last header, instead of the first next-header value. 
Obtained from: KAME
MFC after: 1 day
 2005-10-19 01:21:49 +00:00
suz
021524b6b5 fixed a kernel crash when IPv6 PIM-SM routing is enabled and a PIM register message is received 
Obtained from: KAME
MFC After: 3 days
 2005-10-17 13:47:31 +00:00
suz
b63fa30718 added a missing unlock 
Submitted by: JINMEI Tatuya
MFC After: 1 day
 2005-10-15 08:49:49 +00:00
ume
9efae94820 AES counter mode uses 8byte IV, not 16 bytes. 
Obtained from:	NetBSD
 2005-10-12 09:13:48 +00:00
andre
b1aa5bb640 Use monotonic 'time_uptime' instead of 'time_second' as timebase 
for rt->rt_rmx.rmx_expire.
 2005-09-19 22:54:55 +00:00
suz
6036f04bab plugged a possible memory leak 
Obtained from: KAME
MFC after: 1 day
 2005-09-16 01:42:50 +00:00
obrien
c532dfe745 IPv6 was improperly defining its malloc type the same as IPv4 (M_IPMADDR, 
M_IPMOPTS, M_MRTABLE).  Thus we had conflicting instantiations.
Create an IPv6-specific type to overcome this.
 2005-09-07 10:11:49 +00:00
thompsa
ab218f3cd3 Add support for multicast to the bridge and allow inet6 addresses to be 
assigned to the interface.

IPv6 auto-configuration is disabled. An IPv6 link-local address has a
link-local scope within one link, the spec is unclear for the bridge case and
it may cause scope violation.

An address can be assigned in the usual way;
  ifconfig bridge0 inet6 xxxx:...

Tested by:	bmah
Reviewed by:	ume (netinet6)
Approved by:	mlaier (mentor)
MFC after:	1 week
 2005-09-06 21:11:59 +00:00
andre
02715a1de8 Use the correct mbuf type for MGET(). 2005-08-30 16:35:27 +00:00
suz
1dd6384f2b added a missing unlock (just do the same thing as in netinet/raw_ip.c) 
Obtained from: KAME
MFC after: 3 days
 2005-08-18 11:11:27 +00:00
ume
d73a48f4b8 - fix race condition using sx lock. 
- use TAILQ_FOREACH() for readability.

Suggested by:	jhb
 2005-08-17 16:46:55 +00:00
ume
0b8c72b90b avoid exclusive sleep mutex. 2005-08-16 19:49:10 +00:00
ume
08a5c349d1 added a knob to enable path MTU discovery for multicast packets. 
(by default, it is disabled)

Submitted by:	suz
Obtained from:	KAME
 2005-08-13 19:55:06 +00:00
ume
fe6f4a34b3 - fix typo in comment. 
- nuke unused code.

Submitted by:	suz
Obtained from:	KAME
 2005-08-12 15:27:25 +00:00
glebius
fa253399af o Make rt_check() function more strict: 
- rt0 passed to rt_check() must not be NULL, assert this.
  - rt returned by rt_check() must be valid locked rtentry,
    if no error occured.
o Modify callers, so that they never pass NULL rt0
  to rt_check().

Reviewed by:	sam, ume (nd6.c)
 2005-08-11 08:14:53 +00:00
ume
e0688f1293 create sysctl tree dynamically. it is required to share 
net.inet6.ip6.fw with upcomming ipfw2 improvement for IPv6.

Requested by:	bz
 2005-08-11 07:28:01 +00:00
ume
c9a2728833 removed RFC1885-related code. it was obsoleted by RFC2463, and the 
code was #ifdef'ed out for a long time.

Submitted by:	suz
Obtained from:	KAME
 2005-08-10 17:30:10 +00:00
suz
62a02b864f supports stealth forwarding in IPv6, as well as in IPv4 
PR: kern/54625
MFC after: 1 week
 2005-08-10 09:13:35 +00:00
obrien
d5d343a0fd Remove public declarations of variables that were forgotten when they were 
made static.
 2005-08-10 07:10:02 +00:00
obrien
d07b8d496e Style nit. 2005-08-10 06:38:46 +00:00
suz
57f686d55c fixed a kernel crash at the start-up time of an IPv6 multicast daemons o 
(e.g. pim6dd, pim6sd)

MFC after: 3 days
 2005-08-10 05:28:11 +00:00
ume
0b5fb77679 corrected the fourth argument to ni6_addrs(). 2005-08-09 12:24:11 +00:00
rwatson
5d770a09e8 Propagate rename of IFF_OACTIVE and IFF_RUNNING to IFF_DRV_OACTIVE and 
IFF_DRV_RUNNING, as well as the move from ifnet.if_flags to
ifnet.if_drv_flags.  Device drivers are now responsible for
synchronizing access to these flags, as they are in if_drv_flags.  This
helps prevent races between the network stack and device driver in
maintaining the interface flags field.

Many __FreeBSD__ and __FreeBSD_version checks maintained and continued;
some less so.

Reviewed by:	pjd, bz
MFC after:	7 days
 2005-08-09 10:20:02 +00:00
glebius
f2edd835a7 In preparation for fixing races in ARP (and probably in other 
L2/L3 mappings) make rt_check() return a locked rtentry.
 2005-08-09 08:39:56 +00:00
glebius
4d15123a5e - Use 'error' variable to store error value, instead of 'i'. 
- Push 'i' into the only block where it is used.
- Remove redundant check for rt being NULL. If rt_check() hasn't
  returned an error, then rt is valid.

Reviewed by:	gnn
 2005-08-09 08:37:28 +00:00
rwatson
efa13b9da9 Modify network protocol consumers of the ifnet multicast address lists 
to lock if_addr_mtx.

Problem reported by:	Ed Maste <emaste at phaedrus dot sandvine dot ca>
MFC after:		1 week
 2005-08-02 23:51:22 +00:00
ume
aef495bf52 simplied the fix to FreeBSD-SA-04:06.ipv6. The previous one worried 
too much even though we actually validate the parameters.  This code
also is more compatible with other *BSDs, which do copyin within
setsockopt().

Submitted by:	Keiichi SHIMA <keiichi__at__iijlab.net>
Reviewed by:	security-officer (nectar)
Obtained from:	KAME
 2005-07-28 18:07:07 +00:00
cperciva
6393df51cc Correct a buffer overflow which can occur when decompressing a 
carefully crafted deflated data stream. [1]

Correct problems in the AES-XCBC-MAC IPsec authentication algorithm. [2]

Submitted by:	suz [2]
Security:	FreeBSD-SA-05:18.zlib [1], FreeBSD-SA-05:19.ipsec [2]
 2005-07-27 08:41:17 +00:00
ume
0c95d55c4d nuke duplicate inclusion of scope6_var.h. 2005-07-26 11:46:15 +00:00