freebsd-skq/sys
kp 45e82adb5b pf: Limit the fragment entry queue length to 64 per bucket.
So we have a global limit of 1024 fragments, but it is fine grained to
the region of the packet.  Smaller packets may have less fragments.
This costs another 16 bytes of memory per reassembly and devides the
worst case for searching by 8.

Obtained from:	OpenBSD
Differential Revision:	https://reviews.freebsd.org/D17734
2018-11-02 15:32:04 +00:00
..
amd64 Don't enter DDB for fatal traps before panic by default. 2018-11-01 21:34:17 +00:00
arm Don't enter DDB for fatal traps before panic by default. 2018-11-01 21:34:17 +00:00
arm64 Don't enter DDB for fatal traps before panic by default. 2018-11-01 21:34:17 +00:00
bsm
cam Add comments explaining what hold/unhold do 2018-11-01 21:51:41 +00:00
cddl Make vop_symlink take a const target path. 2018-11-02 14:42:36 +00:00
compat Regent after r340034: Use mode_t when the documented signature does. 2018-11-01 23:10:53 +00:00
conf Retire CLANG_NO_IAS34 2018-11-01 23:11:47 +00:00
contrib Update to Zstandard 1.3.7 2018-10-22 18:29:12 +00:00
crypto rijndael (AES): Avoid leaking sensitive data on kernel stack 2018-10-26 20:53:01 +00:00
ddb ddb: Enable 'thread <address>' 2018-10-20 20:45:49 +00:00
dev Add new USB v2.0 PCI ID. 2018-11-02 15:03:52 +00:00
dts Revert r339421 due to unintended files included to commit. 2018-10-18 15:17:58 +00:00
fs Make vop_symlink take a const target path. 2018-11-02 14:42:36 +00:00
gdb
geom Have gconcat advertise delete support if one of its disks does. 2018-10-30 00:22:14 +00:00
gnu dts: Import DTS for arm64 2018-08-23 13:21:01 +00:00
i386 Don't enter DDB for fatal traps before panic by default. 2018-11-01 21:34:17 +00:00
isa Reapply, with minor tweaks, r338025, from the original commit: 2018-09-26 17:12:14 +00:00
kern Make vop_symlink take a const target path. 2018-11-02 14:42:36 +00:00
kgssapi OpenCrypto: Convert sessions to opaque handles instead of integers 2018-07-18 00:56:25 +00:00
libkern mcount: tidy up ANSIfication 2018-10-20 22:39:35 +00:00
mips Don't enter DDB for fatal traps before panic by default. 2018-11-01 21:34:17 +00:00
modules Retire CLANG_NO_IAS34 2018-11-01 23:11:47 +00:00
net pf: Limit the fragment entry queue length to 64 per bucket. 2018-11-02 15:32:04 +00:00
net80211 Fix misspellings of transmitter/transmitted 2018-08-10 20:37:32 +00:00
netgraph Remove the Yarrow PRNG algorithm option in accordance with due notice 2018-08-26 12:51:46 +00:00
netinet carpstats are the last virtualised variable in the file and end up at the 2018-11-01 17:26:18 +00:00
netinet6 Remove redundant checks for a NULL lbgroup table. 2018-11-01 15:52:49 +00:00
netipsec Add sadb_x_sa2 extension to SADB_ACQUIRE requests. 2018-10-21 14:19:16 +00:00
netpfil pf: Limit the fragment entry queue length to 64 per bucket. 2018-11-02 15:32:04 +00:00
netsmb Make timespecadd(3) and friends public 2018-07-30 15:46:40 +00:00
nfs Switch RIB and RADIX_NODE_HEAD lock from rwlock(9) to rmlock(9). 2018-06-16 08:26:23 +00:00
nfsclient
nfsserver
nlm
ofed Introduce and use sgid_index in CM requests in ibcore. 2018-09-09 07:20:15 +00:00
opencrypto Add sha224 to the authctx union. 2018-10-23 18:07:37 +00:00
powerpc Don't enter DDB for fatal traps before panic by default. 2018-11-01 21:34:17 +00:00
riscv Restrict setting PTE execute permissions on RISC-V. 2018-11-01 22:23:15 +00:00
rpc Set SO_SNDTIMEO in the client side krpc when CLSET_TIMEOUT is done. 2018-07-20 12:03:16 +00:00
security Rework the logic around quick checks for auditing that take place at 2018-10-02 15:58:17 +00:00
sparc64 Compile in VERBOSE_SYSINIT support by default, remain silent by default 2018-10-31 22:38:19 +00:00
sys Make vop_symlink take a const target path. 2018-11-02 14:42:36 +00:00
teken Implement ECMA-48 "REP", some Linuxen have started emitting them recently. 2018-10-21 08:29:36 +00:00
tests epoch_test: fix compile 2018-07-15 00:31:17 +00:00
tools Only call sigdeferstop() for NFS. 2018-10-23 21:43:41 +00:00
ufs Make vop_symlink take a const target path. 2018-11-02 14:42:36 +00:00
vm Revert r336984. 2018-10-30 22:40:40 +00:00
x86 Add pci_early function to detect Intel stolen memory. 2018-10-31 23:17:00 +00:00
xdr
xen xen: legacy PVH fixes for the new interrupt count 2018-09-13 07:14:11 +00:00
Makefile