Dag-Erling Smørgrav 1a05c762b9 Fix the length calculation for the final block of a sendfile(2) ...

transmission which could be tricked into rounding up to the nearest
page size, leaking up to a page of kernel memory.  [13:11]

In IPv6 and NetATM, stop SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR
and SIOCSIFNETMASK at the socket layer rather than pass them on to the
link layer without validation or credential checks.  [SA-13:12]

Prevent cross-mount hardlinks between different nullfs mounts of the
same underlying filesystem.  [SA-13:13]

Security:	CVE-2013-5666
Security:	FreeBSD-SA-13:11.sendfile
Security:	CVE-2013-5691
Security:	FreeBSD-SA-13:12.ifioctl
Security:	CVE-2013-5710
Security:	FreeBSD-SA-13:13.nullfs
Approved by:	re

2013-09-10 10:05:59 +00:00

..

dest6.c

Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.

2013-04-09 07:11:22 +00:00

frag6.c

Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.

2013-04-09 07:11:22 +00:00

icmp6.c

- Use time_uptime instead of time_second in data structures for

2013-08-05 20:13:02 +00:00

icmp6.h

…

in6_cksum.c

MFp4 bz_ipv6_fast:

2012-05-24 18:25:09 +00:00

in6_gif.c

Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.

2013-04-09 07:11:22 +00:00

in6_gif.h

Remove __P.

2012-10-22 21:49:56 +00:00

in6_ifattach.c

Fix a panic in tmpaddrtimer.

2013-08-05 00:36:12 +00:00

in6_ifattach.h

Use FF02:0:0:0:0:2:FF00::/104 prefix for IPv6 Node Information Group

2013-05-04 19:16:26 +00:00

in6_mcast.c

Fix an integer overflow in computing the size of a temporary buffer

2013-08-22 00:51:37 +00:00

in6_pcb.c

A complete duplication of binding should be allowed if on both new and

2013-07-12 19:08:33 +00:00

in6_pcb.h

Remove __P.

2012-10-22 21:49:56 +00:00

in6_pcbgroup.c

…

in6_proto.c

Migrate structs ip6stat, icmp6stat and rip6stat to PCPU counters.

2013-07-09 09:54:54 +00:00

in6_rmx.c

Eliminate code checking if found IPv6 rte is dynamic. IPv6 redirects

2012-10-22 12:54:52 +00:00

in6_src.c

Fix accounting after the r249528, also add several another counters to

2013-04-16 11:31:26 +00:00

in6_var.h

Migrate structs in6_ifstat and icmp6_ifstat to PCPU counters.

2013-07-09 09:59:46 +00:00

in6.c

Fix the length calculation for the final block of a sendfile(2)

2013-09-10 10:05:59 +00:00

in6.h

- Use time_uptime instead of time_second in data structures for

2013-08-05 20:13:02 +00:00

ip6_ecn.h

…

ip6_forward.c

- Use time_uptime instead of time_second in data structures for

2013-08-05 20:13:02 +00:00

ip6_id.c

- Use time_uptime instead of time_second in data structures for

2013-08-05 20:13:02 +00:00

ip6_input.c

Implement the ip, tcp, and udp DTrace providers. The probe definitions use

2013-08-25 21:54:41 +00:00

ip6_ipsec.c

Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.

2013-04-09 07:11:22 +00:00

ip6_ipsec.h

…

ip6_mroute.c

Use an unsigned long when indexing into mfchashtbl[] and mf6ctable[]. This

2013-09-05 14:16:37 +00:00

ip6_mroute.h

Prepare network statistics structures for migration to PCPU counters.

2013-07-09 09:32:06 +00:00

ip6_output.c

Restructure the mbuf pkthdr to make it fit for upcoming capabilities and

2013-08-24 19:51:18 +00:00

ip6_var.h

Move the global M_SKIP_FIREWALL mbuf flags to a protocol layer specific

2013-08-19 11:08:36 +00:00

ip6.h

…

ip6protosw.h

Remove __P.

2012-10-22 21:49:56 +00:00

mld6_var.h

…

mld6.c

Restructure the mbuf pkthdr to make it fit for upcoming capabilities and

2013-08-24 19:51:18 +00:00

mld6.h

…

nd6_nbr.c

- Use m_getcl() instead of hand allocating.

2013-03-15 13:48:53 +00:00

nd6_rtr.c

- Use time_uptime instead of time_second in data structures for

2013-08-05 20:13:02 +00:00

nd6.c

Implement the ip, tcp, and udp DTrace providers. The probe definitions use

2013-08-25 21:54:41 +00:00

nd6.h

Add const qualifier to the dst parameter of the ifnet if_output method.

2013-04-26 12:50:32 +00:00

pim6_var.h

Remove most of the remaining sysctl name list macros. They were only

2013-08-26 18:16:05 +00:00

pim6.h

…

raw_ip6.c

Remove the large part of struct ipsecstat. Only few fields of this

2013-07-23 14:14:24 +00:00

raw_ip6.h

Migrate structs ip6stat, icmp6stat and rip6stat to PCPU counters.

2013-07-09 09:54:54 +00:00

route6.c

Use IP6STAT_INC/IP6STAT_DEC macros to update ip6 stats.

2013-04-09 07:11:22 +00:00

scope6_var.h

- Move definition of V_deembed_scopeid to scope6_var.h.

2012-12-05 19:45:24 +00:00

scope6.c

Simplify in6_setscope() function to get better performance.

2013-01-10 00:10:24 +00:00

sctp6_usrreq.c

Provide human readable debug output.

2013-08-25 12:44:03 +00:00

sctp6_var.h

Add support for SCTP/UDP/IPV6.

2012-11-17 20:04:04 +00:00

send.c

Implement the ip, tcp, and udp DTrace providers. The probe definitions use

2013-08-25 21:54:41 +00:00

send.h

…

tcp6_var.h

Remove __P.

2012-10-22 21:49:56 +00:00

udp6_usrreq.c

Implement the ip, tcp, and udp DTrace providers. The probe definitions use

2013-08-25 21:54:41 +00:00

udp6_var.h

…