itojun
5de72de121
disallow negative numbers for ratelimit interval (tcp, icmp, icmp6).
2000-05-22 12:08:43 +00:00
veego
b0c4d85748
Add a missing ; at the end of a line.
2000-05-21 18:47:00 +00:00
veego
4c4ad1d1a5
Resolve conflicts.
2000-05-21 18:45:53 +00:00
jhawk
ca31d672e2
Install "show arptab" (db_show_arptab) in the ddb command tree.
...
Move prototype from netinet/if_inarp.h to ddb/db_interface.h.
Change function to have standard ddb parameters (though they're
ignored).
2000-05-20 03:08:41 +00:00
veego
8db28cd918
Resolve conflicts and fix a compile error in ip_ftp_pxy.c.
2000-05-11 19:46:05 +00:00
itojun
8a0fabf8cf
add missing boundary checks to ip options processing.
...
correct timestamp option validation (len and ptr upper/lower bound
based on RFC791).
fill "pointer" field for parameter problem in timestamp option processing.
2000-05-10 03:31:30 +00:00
itojun
b3c4ed6cf7
correct more out-of-bounds memory access, if cnt == 1 and optlen > 1.
2000-05-10 01:19:44 +00:00
itojun
4a12628c71
correct out-of-bound access when hlen == 1 and opt > 1.
...
reviewed by darren, darren committed to freebsd fil.c (1.12 -> 1.13)
so it should be correct enough.
2000-05-10 00:08:03 +00:00
sommerfeld
90f481ef3f
Handle large offsets with very small options correctly.
2000-05-06 16:35:14 +00:00
mycroft
176e840713
GC in_interfaces.
2000-05-06 02:41:32 +00:00
matt
650107086a
remove superfluous test (snd_una is always > iss since th_ack must > iss
...
(first test at start of case) and th_ack is assigned to snd_una).
2000-05-05 15:05:29 +00:00
matt
5a6e4c896c
From PR #3733 : Only disarm timer if SYN contained the ACK bit since if
...
it didn't it would be a crossing/simultaneous SYN and doesn't mean the
remote TCP received our SYN.
2000-05-05 14:51:46 +00:00
veego
21dea2100c
Resolve conflicts.
2000-05-03 11:12:03 +00:00
sommerfeld
a5ff71cecc
One more __attribute__((__packed__)) to dissuade egcs from making
...
unwarranted asumptions about the structure's alignment.
2000-05-02 14:15:07 +00:00
itojun
3075a916cc
sync with more recent kame. defer inclusion of net/if_gif.h.
2000-04-26 05:36:41 +00:00
enami
c63f06acd3
IN_MULTICAST() takes in_addr.s_addr as argument, not pointer to it.
2000-04-20 01:59:22 +00:00
itojun
d300ce3942
add net/if_stf.h and netinet/ip_encap.h (almost noone will include them though)
2000-04-19 06:39:15 +00:00
itojun
3909133548
introduce sys/netinet/ip_encap.c, to dispatch inbound packets
...
to protocol handlers, based on src/dst (for ip proto #4/41).
see comment in ip_encap.c for details of the problem we have.
there are too many protocol specs for ip proto #4/41.
backward compatibility with MROUTING case is now provided in ip_encap.c.
fix ipip to work with gif (using ip_encap.c). sorry for breakage.
gif now uses ip_encap.c.
introduce stf pseudo interface (implements 6to4, another IPv6-over-IPv4 code
with ip proto #41 ).
2000-04-19 06:30:51 +00:00
chs
e34eb900c0
remove an LBL ifdef that we can't turn on anyway.
2000-04-16 20:59:49 +00:00
chs
46faa6bb58
remove ifdefs to skip htons() on some big-endian platforms.
2000-04-16 20:58:52 +00:00
is
ab879a6479
Copy M_BCAST and M_MCAST flags when fragmenting a packet (else
...
Multicast packets won't be send to the correct link layer address
by the interface driver).
By Artur Grabowski, PR 9772.
2000-04-13 11:48:07 +00:00
enami
97ba34b80b
- Unselect the multicast outgoing interface if it is being detached.
...
- Drop the multicast membership if we are joining through the interface
being detached.
2000-04-03 03:51:16 +00:00
enami
107aabc200
Bump the reference count of ifaddr while it is refered through in_multi.
2000-04-03 03:50:05 +00:00
jdolecek
c42f28d24a
Since last duplicate prototype cleanup, we need to include
...
<netinet/ip_mroute.h> to get ip_mforward() prototype if MROUTING
is defined.
2000-03-31 14:31:03 +00:00
jdolecek
a59a99b6dc
Slighly improve previous - only include <netinet/ip_mroute.h> if MROUTING
...
is defined.
2000-03-31 14:27:17 +00:00
jdolecek
c2acbd102b
include <netinet/ip_mroute.h> for ip_mforward() - needed after
...
last duplicate prototype sweep (prototype for ip_mforward() used to be in <netinet/ip_var.h>)
2000-03-31 08:34:20 +00:00
augustss
8529438fe6
Remove register declarations.
2000-03-30 12:51:13 +00:00
simonb
75c4560a75
Delete reduncdant decl of inetctlerrmap - it's in <netinet/in_var.h>.
2000-03-30 02:39:37 +00:00
simonb
1058c2aba9
Delete redundant decl of zeroin6_addr, it's in <netinet6/in6_var.h>.
2000-03-30 02:38:53 +00:00
simonb
c85fbea607
Delete redundant decl of ip_gif_ttl - it's in <netinet/in_gif.h>.
...
Delete redundant decl of ip_mforward() - it's in <netinet/ip_mroute.h>.
2000-03-30 02:37:40 +00:00
simonb
c2693b78a0
Delete uninitialised declaration of ip_defttl - there's an initialised
...
decl earlier in this file.
2000-03-30 02:35:24 +00:00
simonb
d1fd2a6b54
Delete redundant decl of in_socktrim() - it's in <netinet/in.h>.
2000-03-30 02:33:45 +00:00
simonb
e4c5993774
Extern decl of arpintrq.
2000-03-30 02:32:57 +00:00
thorpej
66470ad12d
Pull in <sys/callout.h> for the benefit of userland.
2000-03-24 22:40:11 +00:00
thorpej
fc96443d15
New callout mechanism with two major improvements over the old
...
timeout()/untimeout() API:
- Clients supply callout handle storage, thus eliminating problems of
resource allocation.
- Insertion and removal of callouts is constant time, important as
this facility is used quite a lot in the kernel.
The old timeout()/untimeout() API has been removed from the kernel.
2000-03-23 07:01:25 +00:00
ws
7da71e5f9e
Make IPKDB working again.
...
Add support for i386 debugging and pci-based ne2000 boards.
2000-03-22 20:58:25 +00:00
itojun
2dbc76c437
tabify a line.
2000-03-22 06:10:39 +00:00
itojun
19b198e8c2
improve comment (about undo'ing code on in{,6}_ifinit failure)
2000-03-21 11:23:31 +00:00
itojun
d926d6fa47
#if 0'ed undo code for interface address addition failure.
...
it was a bit too strong, and forbids multiple addresses from
same prefix to be assigned.
now the behavior is the same as previous - memory leak on interface address
addition failure.
http://orange.kame.net/dev/query-pr.cgi?pr=218
2000-03-18 02:41:58 +00:00
itojun
9f8cac1f16
undo interface address addition attempt, when in_ifinit fails.
...
(this basically avoids memory leakage)
2000-03-12 05:01:16 +00:00
thorpej
0fcf68825f
Back out previous, and adjust a comment.
2000-03-10 22:39:03 +00:00
itojun
673e8e6fad
move IPPROTO_DONE to IPPROTO_xx group
2000-03-10 15:30:55 +00:00
itojun
402493dee5
change member name for icmp6_filter, to be conformant to RFC2292.
...
From: Francis Dupont
2000-03-09 21:26:16 +00:00
thorpej
d315d42657
Back out part of 1.104 which isn't actually needed.
2000-03-07 05:39:57 +00:00
mycroft
5a212f7999
Fix a splx() botch or two.
2000-03-07 04:58:35 +00:00
itojun
6a70fada85
allow SIOCDIFADDR with AF_UNSPEC address by default, until we fix ifconfig(8).
...
(should be COMPAT_43)
2000-03-06 19:33:13 +00:00
itojun
be78177ba2
comment fix, sync with kame.
2000-03-03 17:42:14 +00:00
itojun
38441b4ae3
remove unnecessary ttl initialization which I mistakingly bringed in
...
during KAME merge (this is part of WIDE's expeirmental reass code...)
NetBSD PR: 9412
From: Wolfgang Rupprecht <wolfgang@wsrcc.com>
Fix from: ho@crt.se
itojun was notified from: theo
2000-03-03 13:07:42 +00:00
thorpej
754bba7b6c
Avoid a bug in GCC which manifests itself when processing unaligned
...
IP options. Problem pointed out by Matt Hargett and Erik Fair, analyzed
by me.
2000-03-02 06:07:36 +00:00
itojun
04ac848d6f
introduce m->m_pkthdr.aux to hold random data which needs to be passed
...
between protocol handlers.
ipsec socket pointers, ipsec decryption/auth information, tunnel
decapsulation information are in my mind - there can be several other usage.
at this moment, we use this for ipsec socket pointer passing. this will
avoid reuse of m->m_pkthdr.rcvif in ipsec code.
due to the change, MHLEN will be decreased by sizeof(void *) - for example,
for i386, MHLEN was 100 bytes, but is now 96 bytes.
we may want to increase MSIZE from 128 to 256 for some of our architectures.
take caution if you use it for keeping some data item for long period
of time - use extra caution on M_PREPEND() or m_adj(), as they may result
in loss of m->m_pkthdr.aux pointer (and mbuf leak).
this will bump kernel version.
(as discussed in tech-net, tested in kame tree)
2000-03-01 12:49:27 +00:00