freebsd kernel with SKQ
Go to file
glebius 1ea1d562a3 Once pf became not covered by a single mutex, many counters in it became
race prone. Some just gather statistics, but some are later used in
different calculations.

A real problem was the race provoked underflow of the states_cur counter
on a rule. Once it goes below zero, it wraps to UINT32_MAX. Later this
value is used in pf_state_expires() and any state created by this rule
is immediately expired.

Thus, make fields states_cur, states_tot and src_nodes of struct
pf_rule be counter(9)s.

Thanks to Dennis for providing me shell access to problematic box and
his help with reproducing, debugging and investigating the problem.

Thanks to:		Dennis Yusupoff <dyr smartspb.net>
Also reported by:	dumbbell, pgj, Rambler
Sponsored by:		Nginx, Inc.
2014-02-14 10:05:21 +00:00
bin sh: Allow aliases to force alias substitution on the following word. 2014-01-26 21:19:33 +00:00
cddl Add caveat to zpool manpage indicating that we do not automatically activate 2014-02-11 15:38:29 +00:00
contrib An ABI incompatibility crept into the libc++ 3.4 import in r261283. It 2014-02-12 18:14:49 +00:00
crypto Fix installations that use kernels without CAPABILITIES support. 2014-02-04 21:48:09 +00:00
etc Regenerate usb.conf 2014-02-06 10:52:51 +00:00
games Fix typo in fortune (go -> to) 2013-12-10 19:42:35 +00:00
gnu add support for building a cross-gdb for ARM... This isn't hooked up 2014-02-12 02:08:42 +00:00
include Update jemalloc to version 3.5.0. 2014-01-23 02:47:36 +00:00
kerberos5 Speculatively replace a cp with a cat for gathering data on a 2014-01-28 22:23:39 +00:00
lib libutil/pw_util.3: Fix two prototypes. 2014-02-13 05:13:22 +00:00
libexec Add a new flag to /etc/ttys: onifconsole. This is equivalent to "on" if the 2014-01-20 18:15:06 +00:00
release Add qlxgbe(4) and qlxge(4) to the hardware notes. 2014-02-04 12:34:08 +00:00
rescue - Trim an unused and bogus Makefile for mount_smbfs. 2013-06-28 21:00:08 +00:00
sbin Once pf became not covered by a single mutex, many counters in it became 2014-02-14 10:05:21 +00:00
secure Upgrade to OpenSSH 6.5p1. 2014-01-31 13:12:02 +00:00
share Add OFW support to the in tree gpio compatible devices: gpioiic(4) and 2014-02-13 17:58:52 +00:00
sys Once pf became not covered by a single mutex, many counters in it became 2014-02-14 10:05:21 +00:00
tests tests/sys/Makefile 2014-02-08 00:20:21 +00:00
tools Use CAP_EVENT instead of the deprecated CAP_POLL_EVENT. 2014-02-06 21:36:14 +00:00
usr.bin Reword. 2014-02-14 07:43:39 +00:00
usr.sbin Bump .Dd forgotten in r261832. 2014-02-13 13:11:34 +00:00
COPYRIGHT Bump copyright year. 2013-12-31 12:18:10 +00:00
LOCKS Explicitly require Security Officer's approval for kernel PRNG bits. 2013-09-17 14:19:05 +00:00
MAINTAINERS pkg_install has been removed on 20131031. 2013-11-09 16:20:42 +00:00
Makefile Remove the armv6eb architecture as it is unused, and almost certainly 2013-09-22 07:30:17 +00:00
Makefile.inc1 Merge from CheriBSD: 2014-01-30 22:26:51 +00:00
ObsoleteFiles.inc Add more obsolete files. 2014-02-09 21:27:32 +00:00
README
UPDATING Add a note to UPDATING about the ABI compatibility fix done in r261801. 2014-02-12 18:16:56 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree, the most
commonly used one being ``world'', which rebuilds and installs
everything in the FreeBSD system from the source tree except the
kernel, the kernel-modules and the contents of /etc.  The ``world''
target should only be used in cases where the source tree has not
changed from the currently running version.  See:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
for more information, including setting make(1) variables.

The ``buildkernel'' and ``installkernel'' targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process, documentation
for which can be found at:
   http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
And in the config(8) man page.
Note: If you want to build and install the kernel with the
``buildkernel'' and ``installkernel'' targets, you might need to build
world before.  More information is available in the handbook.

The sample kernel configuration files reside in the sys/<arch>/conf
sub-directory (assuming that you've installed the kernel sources), the
file named GENERIC being the one used to build your initial installation
kernel.  The file NOTES contains entries and documentation for all possible
devices, not just those commonly used.  It is the successor of the ancient
LINT file, but in contrast to LINT, it is not buildable as a kernel but a
pure reference and documentation file.


Source Roadmap:
---------------
bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/synching.html