Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
65fa004526
NetBSD/sys/netipsec
History
drochner 4b552d0b1b adopt a fix from OpenBSD: when scanning the IPv6 header chain, take 
into account that the extension header type is not in the extension
header itself but in the previous one -- this makes a difference
because (a) the length field is different for AH than for all others
and (b) the offset of the "next type" field isn't the same in primary
and extension headers.
(I didn't manage to trigger the bug in my tests, no extension headers
besides AH made it to that point. Didn't try hard enough -- the fix
is still valid.)
2011-02-21 22:54:45 +00:00
..
ah_var.h Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> and 2008-04-23 06:09:04 +00:00
ah.h
esp_var.h Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> and 2008-04-23 06:09:04 +00:00
esp.h
files.netipsec defflag IPSEC_DEBUG 2007-11-16 21:15:20 +00:00
ipcomp_var.h Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> and 2008-04-23 06:09:04 +00:00
ipcomp.h
ipip_var.h Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> and 2008-04-23 06:09:04 +00:00
ipsec6.h Adapt FAST_IPSEC to recent KPI changes. 2009-05-10 02:13:07 +00:00
ipsec_input.c adopt a fix from OpenBSD: when scanning the IPv6 header chain, take 2011-02-21 22:54:45 +00:00
ipsec_mbuf.c Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> and 2008-04-23 06:09:04 +00:00
ipsec_netbsd.c Simplify the interface to netstat_sysctl() and allocate space for 2008-05-04 07:22:14 +00:00
ipsec_osdep.h Now that __HAVE_TIMECOUNTER and __HAVE_GENERIC_TODR are invariants, 2008-01-20 18:09:03 +00:00
ipsec_output.c do proper statistics counting for outbound packets, fixes PR kern/30182 2011-02-18 16:12:26 +00:00
ipsec_private.h Remove clause 3 and 4 from TNF licenses 2008-04-28 20:22:51 +00:00
ipsec_var.h Make IPSEC and FAST_IPSEC stats per-cpu. Use <net/net_stats.h> and 2008-04-23 06:09:04 +00:00
ipsec.c sprinkle some "const", documenting that the SA is not supposed to 2011-02-18 19:06:45 +00:00
ipsec.h sprinkle some "const", documenting that the SA is not supposed to 2011-02-18 19:06:45 +00:00
key_debug.c declare input to kdebug_*() functions which dump structures 2011-02-21 22:21:40 +00:00
key_debug.h declare input to kdebug_*() functions which dump structures 2011-02-21 22:21:40 +00:00
key_var.h
key.c treat "struct secpolicyindex" and "struct secasindex" as "const" once 2011-02-21 22:28:18 +00:00
key.h treat "struct secpolicyindex" and "struct secasindex" as "const" once 2011-02-21 22:28:18 +00:00
keydb.h more "const" 2011-02-18 19:56:01 +00:00
keysock.c Remove separate mb_map. The nmbclusters is computed at boot time based 2010-02-08 19:02:25 +00:00
keysock.h PF_KEY stats for IPSEC and FAST_IPSEC are now per-CPU. 2008-04-23 07:29:47 +00:00
Makefile
xform_ah.c more "const" 2011-02-18 19:56:01 +00:00
xform_esp.c Fix a missing const in FAST_IPSEC && IPSEC_DEBUG 2011-02-19 18:26:50 +00:00
xform_ipcomp.c more "const" 2011-02-18 19:56:01 +00:00
xform_ipip.c more "const" 2011-02-18 19:56:01 +00:00
xform_tcp.c more "const" 2011-02-18 19:56:01 +00:00
xform.h more "const" 2011-02-18 19:56:01 +00:00