src/sys/netinet/libalias, branch main

man: Fix RFC 1918 network prefix lengths

2026-07-17T16:51:11Z

According to RFC 1918, the following IP prefixes are reserved for private internets: 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 This PR fixes the prefix lengths in references to private networks ("RFC 1918 networks", "the standard private IP address ranges"). The changes are limited to man pages. Signed-off-by: Yusuke Ichiki Pull Request: https://github.com/freebsd/freebsd-src/pull/2328 MFC after: 3 days

libalias: use htons() when converting from host to network

2026-07-10T18:12:10Z

PR: 295434

libalias: Fix buffer overflow in RTSP aliasing

2026-06-30T17:00:22Z

In alias_rtsp_out(), we construct a new packet in a fixed-length buffer before copying it back into the original buffer. We never checked if the data we were writing to this temporary buffer fit in it, nor if the result fit in the original buffer. * Use a dynamically sized allocated buffer instead of a fixed-length stack buffer. * Check for overflow before appending to our temporary buffer. * Check for overflow before copying the data back to the packet buffer. * While here, use size_t for sizes and bool for booleans. Approved by: so Security: FreeBSD-SA-26:41.libalias Security: CVE-2026-49420 MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57753

libalias: Serialize updates to the global instance list

2026-06-08T22:49:51Z

libalias maintains a global list of all libalias handles. The list was updated without any locking, but nothing prevents updates from running concurrently. MFC after: 1 week

libalias: quiet gcc -Wcalloc-transposed-args

2025-10-17T22:43:06Z

Reviewed by: phk Differential Revision: https://reviews.freebsd.org/D53151

machine/stdarg.h -> sys/stdarg.h

2025-06-11T16:39:02Z

Switch to using sys/stdarg.h for va_list type and va_* builtins. Make an attempt to insert the include in a sensible place. Where style(9) was followed this is easy, where it was ignored, aim for the first block of sys/*.h headers and don't get too fussy or try to fix other style bugs. Reviewed by: imp Exp-run by: antoine (PR 286274) Pull Request: https://github.com/freebsd/freebsd-src/pull/1595

libalias: Handle GetNewPort() errors properly

2025-04-18T15:11:51Z

AddLink() fails when memory allocation fails or no free port is available; both are error conditions. However, functions such as FindUdpTcpIn() were converting such failures to PKT_ALIAS_IGNORED, which effectively means, "pass the packet without translation," which isn't what we want. Fix the problem by making sure that AddLink() errors are converted to PKT_ALIAS_ERROR where appropriate. The diff is a bit large but is mostly mechanical: functions like TcpAliasOut() are converted to return a result code, and an additional out-parameter is added to return the alias_link pointer. Reported by: Yuxiang Yang Tested by: Yuxiang Yang MFC after: 2 months Differential Revision: https://reviews.freebsd.org/D47778

man: Remove references to classful networks

2025-02-04T21:27:21Z

Update wording in manual pages to replace references to classful networks with CIDR notation. Approved by: glebius, dhw Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D48853

libalias: Add support for EIM NAT

2024-12-05T16:19:13Z

Add support for endpoint-independent mapping ("full cone NAT") in Libalias's UDP NAT. This conforms to RFC 4787 requirements 1 and 3. All UDP packets sent out from a particular internal address:port leave via the same NAT address:port, regardless of their destination. Add some libalias tests and supporting defines. Reviewed by: igoro, thj Differential Revision: https://reviews.freebsd.org/D46689D

tcp: extend the use of the th_flags accessor function

2024-11-29T08:48:23Z

Formally, there are 12 bits for TCP header flags. Use the accessor functions in more (kernel) places. No functional change. Reviewed By: cc, #transport, cy, glebius, #iflib, kbowling Sponsored by: NetApp, Inc. Differential Revision: https://reviews.freebsd.org/D47063