d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1600372b6b
freebsd-skq/sys
History
Andre Oppermann 1600372b6b Ignore ICMP Source Quench messages for TCP sessions. Source Quench is 
ineffective, depreciated and can be abused to degrade the performance
of active TCP sessions if spoofed.

Replace a bogus call to tcp_quench() in tcp_output() with the direct
equivalent tcpcb variable assignment.

Security:	draft-gont-tcpm-icmp-attacks-03.txt Section 7.1
MFC after:	3 days
2005-04-21 12:37:12 +00:00
..
alpha Add empty header (except of the multiple-inclusion protection) to 2005-04-20 18:44:53 +00:00
amd64 Revert previous commit: The hwpmc(4) driver compiles on all platforms. 2005-04-20 22:19:51 +00:00
arm Add empty header (except of the multiple-inclusion protection) to 2005-04-20 18:44:53 +00:00
boot Pass the hostname we got from DHCP to the kernel so that machines can 2005-04-17 21:38:22 +00:00
bsm Add a stub audit_kevents.h, which defines exactly one audit event: 2005-02-02 14:27:36 +00:00
cam Make sure we look at the correct sub op codes when 2005-04-14 04:51:18 +00:00
coda - Change all filesystems and vfs_cache to relock the dvp once the child is 2005-04-13 10:59:09 +00:00
compat Now that the GDT has been reorganized and GNDIS_SEL has been reserved 2005-04-17 19:36:08 +00:00
conf Revert previous commit: The hwpmc(4) driver compiles on all platforms. 2005-04-20 22:19:51 +00:00
contrib Modify the alq(9) alq_open() API to accept a file creation mode, rather 2005-04-16 12:12:27 +00:00
crypto gbde(8) is also rejndael user. 2005-03-11 22:07:04 +00:00
ddb Don't enter the debugger if KDB_UNATTENDED is set or if 2005-04-20 20:52:46 +00:00
dev Rehash the timeout code to make it more simple. 2005-04-21 11:13:39 +00:00
doc
fs Disable negative name caching for msdosfs to work around a bug. 2005-04-16 23:47:19 +00:00
gdb check return value of gdb_rx_varhex 2005-03-28 18:31:18 +00:00
geom The size of a filesystem may be less than the size of the provider it 2005-04-19 21:55:28 +00:00
gnu - Change all filesystems and vfs_cache to relock the dvp once the child is 2005-04-13 10:59:09 +00:00
hwpmc Include <sys/pmc.h> instead of <machine/pmc_mdep.h>. The MI header 2005-04-20 20:26:39 +00:00
i4b Don't use 'i386/include' directly. 2005-04-08 03:37:20 +00:00
i386 Revert previous commit: The hwpmc(4) driver compiles on all platforms. 2005-04-20 22:19:51 +00:00
ia64 Add empty header (except of the multiple-inclusion protection) to 2005-04-20 18:44:53 +00:00
isa Add ISACFGATTR_HINTS flag to allow detection of a device that was created 2005-04-13 03:26:24 +00:00
isofs/cd9660 - Change all filesystems and vfs_cache to relock the dvp once the child is 2005-04-13 10:59:09 +00:00
kern Do not conditionally compile the contents of this file upon whether 2005-04-20 20:30:59 +00:00
libkern Replace the current strspn() and strcspn() with significantly faster 2005-04-02 18:52:44 +00:00
modules Revert previous commit: build hwpmc(4) on all architectures. 2005-04-20 22:03:33 +00:00
net - Call if_link_state_change() for each vlan, when link changes 2005-04-20 12:16:41 +00:00
net80211 Revise crypto api lightly to improve group key handling: 2005-04-12 17:55:13 +00:00
netatalk When generating a phase II ARP lookup from aarpwhohas(), use a 2005-02-22 14:37:22 +00:00
netatm In the current world order, solisten() implements the state transition of 2005-02-21 21:58:17 +00:00
netgraph - Initialize interface as UP when hook is connected. 2005-04-20 14:22:13 +00:00
netinet Ignore ICMP Source Quench messages for TCP sessions. Source Quench is 2005-04-21 12:37:12 +00:00
netinet6 Add IPv6 support to IPFW and Dummynet. 2005-04-18 18:35:05 +00:00
netipsec correct space check 2005-03-09 15:28:48 +00:00
netipx Update copyright: parts of the netipx implementation are covered by a 2005-04-10 18:05:46 +00:00
netkey
netnatm Mark netatm and netnatm explicitly as requiring Giant, as they still do. 2005-02-17 14:21:22 +00:00
netncp avoid potential null ptr derefs 2005-02-23 22:44:38 +00:00
netsmb Explicitly hold a reference to the cdev we have just cloned. This 2005-03-31 12:19:44 +00:00
nfs
nfs4client - cache_lookup() relocks the parent in the DOTDOT case for us. 2005-04-14 07:08:34 +00:00
nfsclient TCP reconnect is not an error. 2005-04-18 13:42:13 +00:00
nfsserver NFS write gathering defers execution of NFS server write requests to wait 2005-04-17 16:25:36 +00:00
opencrypto just use crypto/rijndael, and nuke opencrypto/rindael.[ch]. 2005-03-11 17:24:46 +00:00
pc98 Revert previous commit: The hwpmc(4) driver compiles on all platforms. 2005-04-20 22:19:51 +00:00
pccard Remove more deadwood that never got implemented in NEWCARD, since NEWCARD 2005-02-15 02:54:53 +00:00
pci Fix newer Xircom CBE2-100 cards that were reporting 2005-04-18 03:31:29 +00:00
posix4 Actually commit the code for kern_sched_get_rr_interval(). 2005-03-31 22:54:48 +00:00
powerpc Don't enter the debugger if KDB_UNATTENDED is set or if 2005-04-20 20:52:46 +00:00
rpc - Don't call rpcclnt_realign() if we don't have any mbufs to realign. 2005-03-19 01:16:25 +00:00
security Introduce p_canwait() and MAC Framework and MAC Policy entry points 2005-04-18 13:36:57 +00:00
sparc64 Add empty header (except of the multiple-inclusion protection) to 2005-04-20 18:44:53 +00:00
sys Don't enter the debugger if KDB_UNATTENDED is set or if 2005-04-20 20:52:46 +00:00
tools - Add the character "E" to the understood lock types. This means 2005-04-11 15:15:03 +00:00
ufs - Plug memory leak. 2005-04-16 10:57:49 +00:00
vm Unbreak the build on 64-bit architectures. 2005-04-16 12:37:16 +00:00
Makefile When building cscopnamefile, default architecture to ${MACHINE}, not i386. 2005-03-08 00:09:41 +00:00