freebsd-skq/sys/netpfil/pf
Kristof Provost 5b551954ab pf: Prevent integer overflow in PF when calculating the adaptive timeout.
Mainly states of established TCP connections would be affected resulting
in immediate state removal once the number of states is bigger than
adaptive.start.  Disabling adaptive timeouts is a workaround to avoid this bug.
Issue found and initial diff by Mathieu Blanc (mathieu.blanc at cea dot fr)

Reported by: Andreas Longwitz <longwitz AT incore.de>
Obtained from:  OpenBSD
MFC after:	2 weeks
2018-12-11 21:44:39 +00:00
..
if_pflog.c Use the new VNET_DEFINE_STATIC macro when we are defining static VNET 2018-07-24 16:35:52 +00:00
if_pfsync.c pfsync: Performance improvement 2018-12-06 19:27:15 +00:00
in4_cksum.c SPDX: license IDs for some ISC-related files. 2017-12-08 15:57:29 +00:00
pf_altq.h Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths of 2018-08-22 19:38:48 +00:00
pf_if.c pf: Fix panic on overlapping interface names 2018-12-01 09:58:21 +00:00
pf_ioctl.c pfsync: Handle syncdev going away 2018-11-02 16:57:23 +00:00
pf_lb.c pf: add a comment describing why do we call pf_map_addr again if port 2018-12-06 18:58:54 +00:00
pf_mtag.h sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
pf_norm.c pf: Fix build if INVARIANTS is not set 2018-11-02 19:23:50 +00:00
pf_osfp.c Use the new VNET_DEFINE_STATIC macro when we are defining static VNET 2018-07-24 16:35:52 +00:00
pf_ruleset.c sys: general adoption of SPDX licensing ID tags. 2017-11-27 15:23:17 +00:00
pf_table.c pf: Prevent tables referenced by rules in anchors from getting disabled. 2018-11-08 21:54:40 +00:00
pf.c pf: Prevent integer overflow in PF when calculating the adaptive timeout. 2018-12-11 21:44:39 +00:00
pf.h netpfil: Introduce PFIL_FWD flag 2018-03-23 16:56:44 +00:00