FreeBSD source tree https://cgit-dev.freebsd.org/src-test/atom?h=stable%2F7 2011-10-15T13:05:31Z 2011-10-15T13:05:31Z Christian Brueffer brueffer@FreeBSD.org 2011-10-15T13:05:31Z urn:sha1:cba5a2bccc4c4ef6c36948eb85fcdada85e4f827 Add missing va_end() in an error case to clean up after va_start() (already done in the non-error case). 2011-04-09T10:58:38Z Bjoern A. Zeeb bz@FreeBSD.org 2011-04-09T10:58:38Z urn:sha1:b9ec6c7ed75af254eade47686ebe3feae4887def Do not allow directly recursive RFC3173 IPComp payload. Security: CVE-2011-1547 2010-11-16T03:20:57Z Bjoern A. Zeeb bz@FreeBSD.org 2010-11-16T03:20:57Z urn:sha1:380e09851043ef2a186f7212ecf957262e6a2dff Announce IPsec if available for feature_present(3) checks. 2010-11-06T15:56:44Z Bjoern A. Zeeb bz@FreeBSD.org 2010-11-06T15:56:44Z urn:sha1:6263d099cd94f47751f636e5e3603fbbacc79067 Make the IPsec SADB embedded route cache a union to be able to hold both the legacy and IPv6 route destination address. Previously in case of IPv6, there was a memory overwrite due to not enough space for the IPv6 address. PR: kern/122565 2010-10-17T08:44:34Z Bjoern A. Zeeb bz@FreeBSD.org 2010-10-17T08:44:34Z urn:sha1:9c9fa453b6dce64d7be6c03488526a1410130477 Remove dead code: assignment to a local variable not used anywhere after that. 2010-10-17T03:13:30Z Bjoern A. Zeeb bz@FreeBSD.org 2010-10-17T03:13:30Z urn:sha1:040bb6d0f46991a9795dc47373cb1eb8630d904f Style: make the asterisk go with the variable name, not the type. 2009-12-30T00:03:36Z Bjoern A. Zeeb bz@FreeBSD.org 2009-12-30T00:03:36Z urn:sha1:ef1d5e5006581ac2b0f7d0a75180a3f0e183f510 Enable IPcomp by default. PR: kern/123587 2009-12-29T23:58:32Z Bjoern A. Zeeb bz@FreeBSD.org 2009-12-29T23:58:32Z urn:sha1:204aeaac5e12d1529f42b8c49c10310dabf776d7 Add more statistics variables for IPcomp. Try to version the struct in a backward compatible way. People asked for the versioning of the stats structs in general before. Note: old netstat binaries, as only consumer, continue to work as they are still using kvm but will not display the new stats. [1] Discussed with: rwatson [1] (for stable/8) 2009-12-29T23:44:32Z Bjoern A. Zeeb bz@FreeBSD.org 2009-12-29T23:44:32Z urn:sha1:7e80c7ca02ef7960cef75588f087b018476e6def Assimilate very similar input and output code paths (no real functional change). 2009-12-29T23:40:57Z Bjoern A. Zeeb bz@FreeBSD.org 2009-12-29T23:40:57Z urn:sha1:4f399ad00a0abee032c6b3c41808b2bf4ed96ba7 Only add the IPcomp header if crypto reported success and we have a lower payload size. Before we had always added the header, no matter if we actually send out compressed data or not. With this, after the opencrypto/deflate changes, IPcomp starts to work apart from edge cases. Leave it disabled by default until those are fixed as well. PR: kern/123587