src-test2/sys/netinet/udp_usrreq.c, branch stable/4FreeBSD source treehttps://cgit-dev.freebsd.org/src-test2/atom?h=stable%2F42007-06-10T07:34:28ZMFC 1.209: Don't verify UDP IPv4 checksum in-place.2007-06-10T07:34:28ZDavid Malonedwmalone@FreeBSD.org2007-06-10T07:34:28Zurn:sha1:a3ff700424a791bc6d5d4cdc377f39de5777621bIf we are going to2005-05-06T02:50:00ZColin Percivalcperciva@FreeBSD.org2005-05-06T02:50:00Zurn:sha1:1ed2dcbbea1977826ae858ab63277bfa9e70bc88
1. Copy a NULL-terminated string into a fixed-length buffer, and
2. copyout that buffer to userland,
we really ought to
0. Zero the entire buffer
first.
Security: FreeBSD-SA-05:08.kmem
MFC: Add the IP_ONESBCAST option, to enable undirected IP broadcasts to be2003-09-09T19:09:23ZBruce M Simpsonbms@FreeBSD.org2003-09-09T19:09:23Zurn:sha1:de28d89963d97f41a113e6cd22f17ff5474e6fde
sent on specific interfaces. This is required by aodvd, and may in future
help us in getting rid of the requirement for BPF from our import of isc-dhcp.
PR: kern/37486
Obtained from: BSD/OS
Approved by: re, jake (mentor)
MFC: Fast IPsec2003-01-24T05:11:36ZSam Lefflersam@FreeBSD.org2003-01-24T05:11:36Zurn:sha1:b194344ef6b3648b2aacd9f4c60029ef2156ca9a
"Fast IPsec": this is an experimental IPsec implementation that is derived
from the KAME IPsec implementation, but with heavy borrowing and influence
of openbsd. A key feature of this implementation is that it uses the kernel
crypto framework to do all crypto work so when h/w crypto support is present
IPsec operation is automatically accelerated. Otherwise the protocol
implementations are rather differet while the SADB and policy management
code is very similar to KAME (for the moment).
Note that this implementation is enabled with a FAST_IPSEC option. With this
you get all protocols; i.e. there is no FAST_IPSEC_ESP option.
FAST_IPSEC and IPSEC are mutually exclusive; you cannot build both into a
single system.
This software is well tested with IPv4 but should be considered very
experimental (i.e. do not deploy in production environments). This software
does NOT currently support IPv6. In fact do not configure FAST_IPSEC and
INET6 in the same system.
Supported by: Vernier Networks
MFC: m_tag support2003-01-23T21:06:48ZSam Lefflersam@FreeBSD.org2003-01-23T21:06:48Zurn:sha1:e1b7c4cdaa276a21e66dc41dc066ac341c49e76e
Replace aux mbufs with packet tags:
o instead of a list of mbufs use a list of m_tag structures a la openbsd
o for netgraph et. al. extend the stock openbsd m_tag to include a 32-bit
ABI/module number cookie
o for openbsd compatibility define a well-known cookie MTAG_ABI_COMPAT and
use this in defining openbsd-compatible m_tag_find and m_tag_get routines
o rewrite KAME use of aux mbufs in terms of packet tags
o eliminate the most heavily used aux mbufs by adding an additional struct
inpcb parameter to ip_output and ip6_output to allow the IPsec code to
locate the security policy to apply to outbound packets
o bump __FreeBSD_version so code can be conditionalized
o fixup ipfilter's call to ip_output based on __FreeBSD_version
MFC: bugfix: move check for udp_blackhole before the one for icmp_bandlim.2002-08-07T16:14:47ZLuigi Rizzoluigi@FreeBSD.org2002-08-07T16:14:47Zurn:sha1:1cdca79d6b44ced551af6c30839344517e3e95d1MFC 1.99: restore the data of the ip header when extended udp header2001-10-29T19:28:43ZHajimu UMEMOTOume@FreeBSD.org2001-10-29T19:28:43Zurn:sha1:bd8922641a9d952c0cf7e7a733d5eb7cb6e87f32
and data checksum is calculated. this caused some trouble in the code
which the ip header is not modified. for example, inbound policy lookup
failed.
MFC: new option -z: reset statistic counters after displaying them.2001-09-17T15:17:47ZRuslan Ermilovru@FreeBSD.org2001-09-17T15:17:47Zurn:sha1:2e3affb3eefc15ed547584dd6dcf4b8e836905cbMFC rev 1.742001-08-08T18:59:54ZGuy Helmerghelmer@FreeBSD.org2001-08-08T18:59:54Zurn:sha1:956402dcaa1cd23707d315cf2f5fea4173bf42a6
Make sure UDP sockets are explicitly bound before connect(2) to avoid
UDP datagrams being sent from an IP address other than the jail's IP
address.
PR: 20946
Approved by: murray
MFC: move ipsec security policy allocation into in_pcballoc, before2001-07-29T19:32:40ZHajimu UMEMOTOume@FreeBSD.org2001-07-29T19:32:40Zurn:sha1:aaf9598ff14c405efd452ec8248e3d2c25aa8027
making pcbs available to the outside world. otherwise, we will see
inpcb without ipsec security policy attached (-> panic() in ipsec.c).
sys/netinet/in_pcb.c: 1.86
sys/netinet/ip_divert.c: 1.50
sys/netinet/raw_ip.c: 1.80
sys/netinet/tcp_usrreq.c: 1.65
sys/netinet/udp_usrreq.c: 1.93
sys/netinet6/raw_ip6.c: 1.12
sys/netinet6/udp6_usrreq.c: 1.16