01b240a5a7
about rules and dynamic rules. it later fills this buffer with these rules. it also takes the opporunity to compare the expiration of the dynamic rules with the current time and either marks them for deletion or simply charges the countdown. unfortunatly it does this all (the sizing, the buffer copying, and the expiration GC) with no spl protection whatsoever. it was possible for the dynamic rule(s) to be ripped out from under the request before it had completed, resulting in corrupt memory dereferencing. Reviewed by: ps MFC before: 4.4-RELEASE, hopefully. |
||
|---|---|---|
| .. | ||
| libalias | ||
| accf_data.c | ||
| accf_http.c | ||
| icmp6.h | ||
| icmp_var.h | ||
| if_atm.c | ||
| if_atm.h | ||
| if_ether.c | ||
| if_ether.h | ||
| if_fddi.h | ||
| igmp_var.h | ||
| igmp.c | ||
| igmp.h | ||
| in_cksum.c | ||
| in_gif.c | ||
| in_gif.h | ||
| in_hostcache.c | ||
| in_hostcache.h | ||
| in_pcb.c | ||
| in_pcb.h | ||
| in_proto.c | ||
| in_rmx.c | ||
| in_systm.h | ||
| in_var.h | ||
| in.c | ||
| in.h | ||
| ip6.h | ||
| ip_divert.c | ||
| ip_dummynet.c | ||
| ip_dummynet.h | ||
| ip_ecn.c | ||
| ip_ecn.h | ||
| ip_encap.c | ||
| ip_encap.h | ||
| ip_flow.c | ||
| ip_flow.h | ||
| ip_fw.c | ||
| ip_fw.h | ||
| ip_icmp.c | ||
| ip_icmp.h | ||
| ip_id.c | ||
| ip_input.c | ||
| ip_mroute.c | ||
| ip_mroute.h | ||
| ip_output.c | ||
| ip_var.h | ||
| ip.h | ||
| ipprotosw.h | ||
| raw_ip.c | ||
| tcp_debug.c | ||
| tcp_debug.h | ||
| tcp_fsm.h | ||
| tcp_input.c | ||
| tcp_output.c | ||
| tcp_reass.c | ||
| tcp_seq.h | ||
| tcp_subr.c | ||
| tcp_timer.c | ||
| tcp_timer.h | ||
| tcp_timewait.c | ||
| tcp_usrreq.c | ||
| tcp_var.h | ||
| tcp.h | ||
| tcpip.h | ||
| udp_usrreq.c | ||
| udp_var.h | ||
| udp.h | ||