d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
0a389eab22
freebsd-skq/sys
History
Simon L. B. Nielsen 0a389eab22 Fix ipfw packet matching errors with address tables. 
The ipfw tables lookup code caches the result of the last query.  The
kernel may process multiple packets concurrently, performing several
concurrent table lookups.  Due to an insufficient locking, a cached
result can become corrupted that could cause some addresses to be
incorrectly matched against a lookup table.

Submitted by:	ru
Reviewed by:	csjp, mlaier
Security:	CAN-2005-2019
Security:	FreeBSD-SA-05:13.ipfw

Correct bzip2 permission race condition vulnerability.

Obtained from:	Steve Grubb via RedHat
Security:	CAN-2005-0953
Security:	FreeBSD-SA-05:14.bzip2
Approved by:	obrien

Correct TCP connection stall denial of service vulnerability.

A TCP packets with the SYN flag set is accepted for established
connections, allowing an attacker to overwrite certain TCP options.

Submitted by:	Noritoshi Demizu
Reviewed by:	andre, Mohan Srinivasan
Security:	CAN-2005-2068
Security:	FreeBSD-SA-05:15.tcp

Approved by:	re (security blanket), cperciva
2005-06-29 21:36:49 +00:00
..
alpha Add .cvsignore files just like in sys/<arch>/compiled, this keeps CVS from 2005-06-20 16:52:59 +00:00
amd64 Increase MAXCPU to 16 in SMP kernels so that APIC IDs from 0 to 15 are 2005-06-29 15:13:25 +00:00
arm - Use a TAILQ instead of parsing the array to find a free dmamap. 2005-06-24 23:57:27 +00:00
boot Improved markup, fixes some spelling and grammar. 2005-06-14 08:49:14 +00:00
bsm For consistency with more system include files, add a trailing '_' to 2005-05-29 16:11:34 +00:00
cam Fixing a memory leak in xpt_release_device(), which can be quickly 2005-06-24 08:09:05 +00:00
coda - Change all filesystems and vfs_cache to relock the dvp once the child is 2005-04-13 10:59:09 +00:00
compat - Change the commented out freebsd32_xxx() example to use kern_xxx() along 2005-06-29 15:16:20 +00:00
conf Use -mno-apcs-frame if DEBUG isn't defined. 2005-06-27 14:33:32 +00:00
contrib Properly initialize ifq_maxlen for the defered send queue and make it 2005-06-26 21:00:52 +00:00
crypto gbde(8) is also rejndael user. 2005-03-11 22:07:04 +00:00
ddb Don't enter the debugger if KDB_UNATTENDED is set or if 2005-04-20 20:52:46 +00:00
dev o Fix a write mbuf-after-free bug. The duration field of the 802.11 header 2005-06-29 17:54:01 +00:00
doc
fs Avoid casting from (int *) to (size_t *) in order to fix udf_iconv on amd64. 2005-06-05 02:09:48 +00:00
gdb check return value of gdb_rx_varhex 2005-03-28 18:31:18 +00:00
geom After provider creation!! 2005-05-25 15:54:17 +00:00
gnu Replace the use if ext2fs' bitops by bitstring.h macros. This fixes 2005-06-21 10:11:13 +00:00
i4b Fix some long standing bugs in writing to the BPF device attached to 2005-06-26 18:11:11 +00:00
i386 Regenerate after addition of audit event type number to syscalls.master 2005-06-29 17:29:06 +00:00
ia64 Handle B-unit break instructions. The break.b is unique in that the 2005-06-27 23:51:38 +00:00
isa - Hook up the new locations of the atkbdc(4), atkbd(4) and psm(4) source 2005-06-10 20:56:38 +00:00
isofs/cd9660 - Change all filesystems and vfs_cache to relock the dvp once the child is 2005-04-13 10:59:09 +00:00
kern Fix the false memory modified after free messages some users have been 2005-06-29 08:18:26 +00:00
libkern Fix kiconv on the 64bit plathomes. 2005-05-24 15:38:08 +00:00
modules Backout the change I made before 5.4-R since I wasn't aware that it was only 2005-06-24 21:43:47 +00:00
net Sync if_bridge to NetBSD r1.31 2005-06-29 19:23:32 +00:00
net80211 revert 1.53; it breaks ibss merge 2005-06-13 21:01:06 +00:00
netatalk Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
netatm Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
netgraph - After LibAlias processing check for TCP packet with th_x2 field 2005-06-27 07:39:13 +00:00
netinet Fix ipfw packet matching errors with address tables. 2005-06-29 21:36:49 +00:00
netinet6 fix IP(v4) over IPv6 tunneling most likely broken with ifnet changes. 2005-06-20 20:17:00 +00:00
netipsec Correct typo in a comment describing vshiftl(). 2005-06-02 23:56:10 +00:00
netipx Stop embedding struct ifnet at the top of driver softcs. Instead the 2005-06-10 16:49:24 +00:00
netkey
netnatm Mark netatm and netnatm explicitly as requiring Giant, as they still do. 2005-02-17 14:21:22 +00:00
netncp avoid potential null ptr derefs 2005-02-23 22:44:38 +00:00
netsmb lockmgr(...,LK_DRAIN,...) requires a balancing LK_RELEASE: recent 2005-05-13 11:27:48 +00:00
nfs
nfs4client - We want if (mrep != NULL) not if (m_freem != NULL). m_freem will never 2005-04-25 05:11:19 +00:00
nfsclient Ifdef out the incomplete non-blocking IO implementation for NFS 2005-06-16 15:43:17 +00:00
nfsserver NFS write gathering defers execution of NFS server write requests to wait 2005-04-17 16:25:36 +00:00
opencrypto malloc.h relies on param.h for a definition of MAXCPU. I guess that there is 2005-05-30 05:01:44 +00:00
pc98 Connect reiserfs build to every platforms, not only i386 and pc98. 2005-06-21 12:59:53 +00:00
pccard Change a directory layout for pc98. 2005-05-10 12:02:18 +00:00
pci Make the initialization in the AGPv3 case match that of Linux. Fixes hangs on 2005-06-26 04:01:11 +00:00
posix4 Introduce MAC Framework and MAC Policy entry points to label and control 2005-05-04 10:39:15 +00:00
powerpc Add .cvsignore files just like in sys/<arch>/compiled, this keeps CVS from 2005-06-20 16:52:59 +00:00
rpc - Don't call rpcclnt_realign() if we don't have any mbufs to realign. 2005-03-19 01:16:25 +00:00
security Correct grammar error in comment 2005-06-10 04:44:38 +00:00
sparc64 Add .cvsignore files just like in sys/<arch>/compiled, this keeps CVS from 2005-06-20 16:52:59 +00:00
sys Correct a comment in ucred.h. 2005-06-28 02:23:56 +00:00
tools Allow EVFILT_VNODE events to work on every filesystem type, not just 2005-06-09 20:20:31 +00:00
ufs Allow EVFILT_VNODE events to work on every filesystem type, not just 2005-06-09 20:20:31 +00:00
vm Change the panic in trash_ctor into just a printf for now. Once the reports 2005-06-26 23:44:07 +00:00
Makefile When building cscopnamefile, default architecture to ${MACHINE}, not i386. 2005-03-08 00:09:41 +00:00