delphij 250c8d6f6d Mitigate Local Denial of Service with IPv6 Router Advertisements ...

and log attack attempts.

Submitted by:	hrs
Security:	FreeBSD-SA-15:09.nd6
Security:	CVE-2015-2923

2015-04-07 20:20:09 +00:00

..

dest6.c

…

frag6.c

Move ip6_deletefraghdr() to frag6.c.

2015-02-16 05:58:32 +00:00

icmp6.c

Remove unneded check. No need to do m_pullup to the size that we prepended.

2014-12-02 05:41:03 +00:00

icmp6.h

…

in6_cksum.c

…

in6_gif.c

Extern declarations in C files loses compile-time checking that

2014-12-25 21:32:37 +00:00

in6_ifattach.c

Consistently use if_link.

2014-11-10 15:56:30 +00:00

in6_ifattach.h

…

in6_mcast.c

Use new struct mbufq instead of struct ifqueue to manage packet queues in

2015-02-19 01:21:23 +00:00

in6_pcb.c

tcp6_ctlinput() doesn't pass MTU value to in6_pcbnotify().

2015-03-06 05:50:39 +00:00

in6_pcb.h

…

in6_pcbgroup.c

Refactor / restructure the RSS code into generic, IPv4 and IPv6 specific

2015-01-18 18:06:40 +00:00

in6_proto.c

Renove faith(4) and faithd(8) from base. It looks like industry

2014-11-09 21:33:01 +00:00

in6_rmx.c

Kill custom in_matroute() radix mathing function removing one rte mutex lock.

2014-11-11 02:52:40 +00:00

in6_rss.c

Refactor / restructure the RSS code into generic, IPv4 and IPv6 specific

2015-01-18 18:06:40 +00:00

in6_rss.h

Refactor / restructure the RSS code into generic, IPv4 and IPv6 specific

2015-01-18 18:06:40 +00:00

in6_src.c

For now handle only multicast addresses, we still use routes to

2014-11-10 10:59:08 +00:00

in6_var.h

Move ip6_sprintf() declaration from in6_var.h to in6.h. This is a simple

2015-03-24 16:45:50 +00:00

in6.c

- Implement loopback probing state in enhanced DAD algorithm.

2015-03-05 21:27:49 +00:00

in6.h

Move ip6_sprintf() declaration from in6_var.h to in6.h. This is a simple

2015-03-24 16:45:50 +00:00

ip6_ecn.h

…

ip6_forward.c

Remove duplicate code

2015-04-06 19:08:44 +00:00

ip6_gre.c

Extern declarations in C files loses compile-time checking that

2014-12-25 21:32:37 +00:00

ip6_id.c

…

ip6_input.c

Fix deadlock in IPv6 PCB code.

2015-03-04 11:20:01 +00:00

ip6_ipsec.c

Use ipsec6_in_reject() to simplify ip6_ipsec_fwd() and ip6_ipsec_input().

2014-12-11 19:09:57 +00:00

ip6_ipsec.h

Remove flag/flags argument from the following functions:

2014-12-11 18:35:34 +00:00

ip6_mroute.c

o Make net.inet6.ip6.mif6table return special API structure, that doesn't

2015-04-06 22:12:18 +00:00

ip6_mroute.h

o Make net.inet6.ip6.mif6table return special API structure, that doesn't

2015-04-06 22:12:18 +00:00

ip6_output.c

Preserve IPv6 fragment IDs accross reassembly and refragmentation

2015-04-01 12:15:01 +00:00

ip6_var.h

Preserve IPv6 fragment IDs accross reassembly and refragmentation

2015-04-01 12:15:01 +00:00

ip6.h

…

ip6protosw.h

…

mld6_var.h

- Rename 'struct mld_ifinfo' into 'struct mld_ifsoftc', since it really

2015-02-19 22:37:01 +00:00

mld6.c

- Rename 'struct mld_ifinfo' into 'struct mld_ifsoftc', since it really

2015-02-19 22:37:01 +00:00

mld6.h

…

nd6_nbr.c

To avoid a possible race, release the reference to ifa after return

2015-03-19 00:04:25 +00:00

nd6_rtr.c

Mitigate Local Denial of Service with IPv6 Router Advertisements

2015-04-07 20:20:09 +00:00

nd6.c

Implement Enhanced DAD algorithm for IPv6 described in

2015-03-02 17:30:26 +00:00

nd6.h

- Implement loopback probing state in enhanced DAD algorithm.

2015-03-05 21:27:49 +00:00

pim6_var.h

…

pim6.h

…

raw_ip6.c

Do not count security policy violation twice.

2014-12-11 19:20:13 +00:00

raw_ip6.h

…

route6.c

…

scope6_var.h

Add sa6_checkzone_ifp() function. It checks correctness of struct

2014-11-10 16:12:51 +00:00

scope6.c

Add sa6_checkzone_ifp() function. It checks correctness of struct

2014-11-10 16:12:51 +00:00

sctp6_usrreq.c

Minimize the usage of SCTP_BUF_IS_EXTENDED.

2015-01-10 20:49:57 +00:00

sctp6_var.h

…

send.c

…

send.h

…

tcp6_var.h

…

udp6_usrreq.c

Refactor / restructure the RSS code into generic, IPv4 and IPv6 specific

2015-01-18 18:06:40 +00:00

udp6_var.h

…