History log of /freebsd-current/sys/netpfil/ipfilter/netinet/fil.c
Revision Date Author Comments
# c43829a7 27-Dec-2023 Jose Luis Duran <jlduran@gmail.com>

netpfil: Fix typo (triple S)

While here, align the comment box.

Reviewed by: imp
Pull Request: https://github.com/freebsd/freebsd-src/pull/955


# 29363fb4 23-Nov-2023 Warner Losh <imp@FreeBSD.org>

sys: Remove ancient SCCS tags.

Remove ancient SCCS tags from the tree, automated scripting, with two
minor fixup to keep things compiling. All the common forms in the tree
were removed with a perl script.

Sponsored by: Netflix


# eba230af 25-Sep-2023 John Baldwin <jhb@FreeBSD.org>

Purge more stray embedded $FreeBSD$ strings

These do not use __FBSDID but instead use bare char arrays.

Reviewed by: imp, emaste
Differential Revision: https://reviews.freebsd.org/D41957


# 7f5e3b9f 12-Sep-2023 Cy Schubert <cy@FreeBSD.org>

ipfilter: Avoid allocating a new ipf token when not needed

Only allocate a new ipftoken_t if one cannot be found. This eliminates
allocating unnecessary token structures that will never be used when
performing simple lookups for existing token structures.

MFC after: 2 weeks


# 71625ec9 16-Aug-2023 Warner Losh <imp@FreeBSD.org>

sys: Remove $FreeBSD$: one-line .c comment pattern

Remove /^/[*/]\s*\$FreeBSD\$.*\n/


# 79f7745c 01-Feb-2023 Cy Schubert <cy@FreeBSD.org>

ipfilter: Fix use after free on packet with broken lengths

Under the scenario with a packet with length of 67 bytes, a header length
using the default of 20 bytes and a TCP data offset (th_off) of 48 will
cause m_pullup() to fail to make sure bytes are arragned contiguously.
m_pullup() will free the mbuf chain and return a null. ipfilter stores
the resultant mbuf address (or the resulting NULL) in its fr_info_t
structure. Unfortuntely the eroneous packet is not flagged for drop.
This results in a kernel page fault at line 410 of sys/netinet/ip_fastfwd.c
as it tries to use a now previously freed, by m_pullup(), mbuf.

PR: 266442
Reported by: Robert Morris <rtm@lcs.mit.edu>
MFC after: 1 week


# d53555d6 15-Sep-2022 Gordon Bergling <gbe@FreeBSD.org>

netpfil: Fix some typos in source code comments

- s/paramter/parameter/
- s/paramters/parameters/

MFC after: 3 days


# 4d89e201 03-Sep-2022 Gordon Bergling <gbe@FreeBSD.org>

netpfil: Correct some typos in source code comments

- s/occured/occurred/
- s/the the/the/

MFC after: 3 days


# a9f09d75 09-Apr-2022 Gordon Bergling <gbe@FreeBSD.org>

netpfil: Remove a double word in a source code comment

- s/a a/a/

MFC after: 3 days


# 70130151 03-Jan-2022 Cy Schubert <cy@FreeBSD.org>

ipfilter module: Style(9) requires a space after return

Reported by: jrtc27
Fixes: 8c82b37461fa4e60276639df214100fbf559ea6e
MFC after: 1 month


# 80030b6c 21-Dec-2021 Cy Schubert <cy@FreeBSD.org>

ipfilter module: Fix whitespace errors

Replace leading spaces with a tabs on affected lines.

MFC after: 1 month


# 8c82b374 21-Dec-2021 Cy Schubert <cy@FreeBSD.org>

ipfilter: Adjust kernel module returns to conform to style(9)

Adjust ipfilter's kernel module return statements to conform to style(9).

MFC after: 1 month


# 9be9c1c0 21-Dec-2021 Cy Schubert <cy@FreeBSD.org>

ipfilter: INLINE --> inline

Replace the INLINE macro with inline. Some ancient compilers supported
__inline__ instead of inline. The INLINE hack compensated for it.
Ancient compilers are history.

Reported by: glebius
MFC after: 1 month


# 064a5a95 20-Dec-2021 Cy Schubert <cy@FreeBSD.org>

ipflter: ANSIfy kernel function declarations

Convert ipfilter kernel function declarations from K&R to ANSI. This
syncs our function declarations with NetBSD hg commit 75edcd7552a0
(apply our changes). Though not copied from NetBSD, this change was
partially inspired by NetBSD's work and inspired by style(9).

Reviewed by: glebius (for #network)
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D33595


# 3b9b51fe 15-Dec-2021 Cy Schubert <cy@FreeBSD.org>

ipfilter: Move kernel bits to netpfil

Through fixes and improvements our ipfilter sources have diverged
enough to warrant move from contrib into sys/netpil. Now that I'm
planning on implementing MSS clamping as in iptables it makes more
sense to move ipfilter to netpfil.

This is the first of three commits the ipfilter move.

Suggested by glebius on two occaions.

Suggested by and discussed with: glebius
Reviewed by: glebius, kp (for #network)
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D33510