#
c43829a7 |
|
27-Dec-2023 |
Jose Luis Duran <jlduran@gmail.com> |
netpfil: Fix typo (triple S) While here, align the comment box. Reviewed by: imp Pull Request: https://github.com/freebsd/freebsd-src/pull/955
|
#
29363fb4 |
|
23-Nov-2023 |
Warner Losh <imp@FreeBSD.org> |
sys: Remove ancient SCCS tags. Remove ancient SCCS tags from the tree, automated scripting, with two minor fixup to keep things compiling. All the common forms in the tree were removed with a perl script. Sponsored by: Netflix
|
#
eba230af |
|
25-Sep-2023 |
John Baldwin <jhb@FreeBSD.org> |
Purge more stray embedded $FreeBSD$ strings These do not use __FBSDID but instead use bare char arrays. Reviewed by: imp, emaste Differential Revision: https://reviews.freebsd.org/D41957
|
#
7f5e3b9f |
|
12-Sep-2023 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: Avoid allocating a new ipf token when not needed Only allocate a new ipftoken_t if one cannot be found. This eliminates allocating unnecessary token structures that will never be used when performing simple lookups for existing token structures. MFC after: 2 weeks
|
#
71625ec9 |
|
16-Aug-2023 |
Warner Losh <imp@FreeBSD.org> |
sys: Remove $FreeBSD$: one-line .c comment pattern Remove /^/[*/]\s*\$FreeBSD\$.*\n/
|
#
79f7745c |
|
01-Feb-2023 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: Fix use after free on packet with broken lengths Under the scenario with a packet with length of 67 bytes, a header length using the default of 20 bytes and a TCP data offset (th_off) of 48 will cause m_pullup() to fail to make sure bytes are arragned contiguously. m_pullup() will free the mbuf chain and return a null. ipfilter stores the resultant mbuf address (or the resulting NULL) in its fr_info_t structure. Unfortuntely the eroneous packet is not flagged for drop. This results in a kernel page fault at line 410 of sys/netinet/ip_fastfwd.c as it tries to use a now previously freed, by m_pullup(), mbuf. PR: 266442 Reported by: Robert Morris <rtm@lcs.mit.edu> MFC after: 1 week
|
#
d53555d6 |
|
15-Sep-2022 |
Gordon Bergling <gbe@FreeBSD.org> |
netpfil: Fix some typos in source code comments - s/paramter/parameter/ - s/paramters/parameters/ MFC after: 3 days
|
#
4d89e201 |
|
03-Sep-2022 |
Gordon Bergling <gbe@FreeBSD.org> |
netpfil: Correct some typos in source code comments - s/occured/occurred/ - s/the the/the/ MFC after: 3 days
|
#
a9f09d75 |
|
09-Apr-2022 |
Gordon Bergling <gbe@FreeBSD.org> |
netpfil: Remove a double word in a source code comment - s/a a/a/ MFC after: 3 days
|
#
70130151 |
|
03-Jan-2022 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter module: Style(9) requires a space after return Reported by: jrtc27 Fixes: 8c82b37461fa4e60276639df214100fbf559ea6e MFC after: 1 month
|
#
80030b6c |
|
21-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter module: Fix whitespace errors Replace leading spaces with a tabs on affected lines. MFC after: 1 month
|
#
8c82b374 |
|
21-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: Adjust kernel module returns to conform to style(9) Adjust ipfilter's kernel module return statements to conform to style(9). MFC after: 1 month
|
#
9be9c1c0 |
|
21-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: INLINE --> inline Replace the INLINE macro with inline. Some ancient compilers supported __inline__ instead of inline. The INLINE hack compensated for it. Ancient compilers are history. Reported by: glebius MFC after: 1 month
|
#
064a5a95 |
|
20-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipflter: ANSIfy kernel function declarations Convert ipfilter kernel function declarations from K&R to ANSI. This syncs our function declarations with NetBSD hg commit 75edcd7552a0 (apply our changes). Though not copied from NetBSD, this change was partially inspired by NetBSD's work and inspired by style(9). Reviewed by: glebius (for #network) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D33595
|
#
3b9b51fe |
|
15-Dec-2021 |
Cy Schubert <cy@FreeBSD.org> |
ipfilter: Move kernel bits to netpfil Through fixes and improvements our ipfilter sources have diverged enough to warrant move from contrib into sys/netpil. Now that I'm planning on implementing MSS clamping as in iptables it makes more sense to move ipfilter to netpfil. This is the first of three commits the ipfilter move. Suggested by glebius on two occaions. Suggested by and discussed with: glebius Reviewed by: glebius, kp (for #network) MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D33510
|