src-test2/sys/netinet/raw_ip.c, branch stable/4

If we are going to

2005-05-06T02:50:00Z

1. Copy a NULL-terminated string into a fixed-length buffer, and 2. copyout that buffer to userland, we really ought to 0. Zero the entire buffer first. Security: FreeBSD-SA-05:08.kmem

MFC: IPFW2 lookup tables.

2004-06-16T06:57:49Z

MFC rev 1.115 (check for null return from M_PREPEND)

2003-09-16T05:43:56Z

Approved by: re

MFC: Add the IP_ONESBCAST option, to enable undirected IP broadcasts to be

2003-09-09T19:09:23Z

sent on specific interfaces. This is required by aodvd, and may in future help us in getting rid of the requirement for BPF from our import of isc-dhcp. PR: kern/37486 Obtained from: BSD/OS Approved by: re, jake (mentor)

Merge from -current support for Protocol Independent Multicast.

2003-08-24T08:24:39Z

Submitted by: Pavlin Radoslavov

Merge rev 1.108 from current: Fix long-standing bug predating

2003-01-24T10:52:50Z

FreeBSD where calling connect() twice on a raw ip socket would crash the system with a null-dereference.

MFC: Fast IPsec

2003-01-24T05:11:36Z

"Fast IPsec": this is an experimental IPsec implementation that is derived from the KAME IPsec implementation, but with heavy borrowing and influence of openbsd. A key feature of this implementation is that it uses the kernel crypto framework to do all crypto work so when h/w crypto support is present IPsec operation is automatically accelerated. Otherwise the protocol implementations are rather differet while the SADB and policy management code is very similar to KAME (for the moment). Note that this implementation is enabled with a FAST_IPSEC option. With this you get all protocols; i.e. there is no FAST_IPSEC_ESP option. FAST_IPSEC and IPSEC are mutually exclusive; you cannot build both into a single system. This software is well tested with IPv4 but should be considered very experimental (i.e. do not deploy in production environments). This software does NOT currently support IPv6. In fact do not configure FAST_IPSEC and INET6 in the same system. Supported by: Vernier Networks

MFC: m_tag support

2003-01-23T21:06:48Z

Replace aux mbufs with packet tags: o instead of a list of mbufs use a list of m_tag structures a la openbsd o for netgraph et. al. extend the stock openbsd m_tag to include a 32-bit ABI/module number cookie o for openbsd compatibility define a well-known cookie MTAG_ABI_COMPAT and use this in defining openbsd-compatible m_tag_find and m_tag_get routines o rewrite KAME use of aux mbufs in terms of packet tags o eliminate the most heavily used aux mbufs by adding an additional struct inpcb parameter to ip_output and ip6_output to allow the IPsec code to locate the security policy to apply to outbound packets o bump __FreeBSD_version so code can be conditionalized o fixup ipfilter's call to ip_output based on __FreeBSD_version

MFC: fix multicast routing KLD support, including some minor bug fixes

2002-11-20T23:20:55Z

(see 1.83 of ip_mroute.c). In detail: conf/files ip_mroute optional mrouting net/route.c remove useless #include, MFC mrouting KLD support netinet/ip_encap.c remove useless #include, access ipip_input through a function pointer (only a partial MFC -- -current has a better solution). fix interface to encap4_input() to avoid varargs netinet/ip_encap.h remove __P, fix interface to encap4_input netinet/ip_input.c MFC: mrouting KLD support, and move here rsvp_input() together with the rest of the rsvp code. netinet/ip_mroute.[ch] MFC 1.83 mrouting cleanup and KLD support netinet/ip_output.c MFC mrouting KLD support netinet/ip_var.h MFC support for mrouting KLD netinet/raw_ip.c MFC support for mrouting KLD Also some innocuous style cleanup (fix function headers, remove register, etc.) which have slipped in and i am too fed up to remove yet another time (and rerun all the kernel builds with all possible combinations of relevant options to make sure their removal does not introduce bugs).

MFC 1.73, 1.75: use macros rather than fondling

2002-10-13T07:03:11Z

implementation details.