freebsd-skq/sys
Eugene Grosbein 47cb0632e8 ipfw: unbreak matching with big table type flow.
Test case:

# n=32769
# ipfw -q table 1 create type flow:proto,dst-ip,dst-port
# jot -w 'table 1 add tcp,127.0.0.1,' $n 1 | ipfw -q /dev/stdin
# ipfw -q add 5 unreach filter-prohib flow 'table(1)'

The rule 5 matches nothing without the fix if n>=32769.

With the fix, it works:
# telnet localhost 10001
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Permission denied
telnet: Unable to connect to remote host

MFC after:	2 weeks
Discussed with: ae, melifaro
2020-06-04 14:15:39 +00:00
..
amd64 Handle getcpu() calls in vsyscall emulation on amd64. 2020-05-31 18:20:20 +00:00
arm Remove remnant of arm's ELF trampoline 2020-05-31 14:43:04 +00:00
arm64 Remove remnant of arm's ELF trampoline 2020-05-31 14:43:04 +00:00
bsm bsm: add AUE_CLOSERANGE 2020-04-24 01:27:25 +00:00
cam Remove session locking from cfiscsi_pdu_update_cmdsn(). 2020-05-29 17:52:20 +00:00
cddl Fix entering KDB with dtrace-enabled kernel. 2020-05-26 16:44:05 +00:00
compat Implement __is_constexpr() function macro in the LinuxKPI. 2020-06-02 12:23:04 +00:00
conf [PowerPC] Fix build-id note on powerpc64 kernel 2020-06-01 19:40:59 +00:00
contrib MFV: r361597 2020-05-28 21:19:44 +00:00
crypto Explicitly zero on-stack IVs, tags, and HMAC keys. 2020-06-03 22:15:11 +00:00
ddb kernel: provide panicky version of __unreachable 2020-05-13 18:07:37 +00:00
dev superio: do not assume that current LDN cannot change after config exit 2020-06-04 13:18:21 +00:00
dts Add copyright headers to spigen overlays for rpi3 and rpi4 2020-06-04 02:36:41 +00:00
fs tmpfs: Preserve alignment of struct fid fields 2020-06-03 09:38:51 +00:00
gdb
geom geom_part: Dispatch to partitions to create providers and aliases 2020-05-29 19:44:18 +00:00
gnu dts: Import DTS from Linux 5.6 2020-04-14 18:57:00 +00:00
i386 Fix boot on systems where NUMA domain 0 is unpopulated. 2020-05-28 19:41:00 +00:00
isa
kern vt(4): reset scrollback and cursor position after clearing history buffer 2020-06-02 01:21:48 +00:00
kgssapi Add support for optional separate output buffers to in-kernel crypto. 2020-05-25 22:12:04 +00:00
libkern libkern: Add arc4random_uniform 2020-05-23 17:51:06 +00:00
mips [mips] fix up the assembly generation of unaligned exception loads 2020-05-29 00:05:43 +00:00
modules Add opt_compat.h needed by r359374. 2020-06-03 23:21:44 +00:00
net Add if_reassing method to all tunneling interfaces. 2020-06-03 13:02:31 +00:00
net80211 [net80211] Fix interrupted scan logic and ticks comparison 2020-05-27 18:32:12 +00:00
netgraph Fix check for wMaxPacketSize in USB bluetooth driver, 2020-05-28 08:41:18 +00:00
netinet We should never allow either the broadcast or IN_ADDR_ANY to be 2020-06-03 14:16:40 +00:00
netinet6 Fix typo in previous commit 2020-06-03 17:26:00 +00:00
netipsec Consistently include opt_ipsec.h for consumers of <netipsec/ipsec.h>. 2020-05-29 19:22:40 +00:00
netpfil ipfw: unbreak matching with big table type flow. 2020-06-04 14:15:39 +00:00
netsmb
nfs Use epoch(9) for rtentries to simplify control plane operations. 2020-05-23 10:21:02 +00:00
nfsclient
nfsserver
nlm Make nfslockd depend on xdr. 2020-04-23 09:37:22 +00:00
ofed Convert OFED rtable interactions to the new routing KPI. 2020-04-15 13:06:55 +00:00
opencrypto Add explicit bzero's of sensitive data in software crypto consumers. 2020-06-03 22:11:05 +00:00
powerpc powerpc: Stop advertising that POWER8 and POWER9 support HTM 2020-05-29 00:46:31 +00:00
riscv Remove remnant of arm's ELF trampoline 2020-05-31 14:43:04 +00:00
rpc Add the .h file that describes the operations for the rpctls_syscall. 2020-05-31 01:12:52 +00:00
security Deduplicate fsid comparisons 2020-05-21 01:55:35 +00:00
sys tmpfs: Preserve alignment of struct fid fields 2020-06-03 09:38:51 +00:00
teken
tests
tools
ufs UFS: write inode block for fdatasync(2) if pointers in inode where allocated 2020-06-04 12:23:15 +00:00
vm Correct terminology in vm.imply_prot_max sysctl description 2020-06-04 01:49:29 +00:00
x86 Remove unnecessary WITNESS check in x86 bus_dma 2020-06-03 00:16:36 +00:00
xdr Split XDR into separate kernel module. Make krpc depend on xdr. 2020-04-17 06:04:20 +00:00
xen
Makefile