FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F9.3.0 2014-07-08T21:55:02Z 2014-07-08T21:55:02Z Xin LI delphij@FreeBSD.org 2014-07-08T21:55:02Z urn:sha1:1121df919e055e752c348c88228b3729c948c289 Security: FreeBSD-SA-14:17.kmem Security: CVE-2014-3952, CVE-2014-3953 Approved by: re (implicit) 2014-06-23T19:47:25Z Michael Tuexen tuexen@FreeBSD.org 2014-06-23T19:47:25Z urn:sha1:3acb8e70d3de20ca79f25821baf0a3700368ff31 Fix a bug in the setsockopt()-handling of the SCTP specific option SCTP_PEER_ADDR_THLDS: Use the provided address as intended. MFC r267781: Fix a bug which incorrectly allowed two listening SCTP sockets on the same port bound to the wildcard address. Approved by: re (gjb@) 2014-06-23T15:04:32Z Michael Tuexen tuexen@FreeBSD.org 2014-06-23T15:04:32Z urn:sha1:5e16ff578b72149187eaa3f2fd60180c369168f2 Honor jails for unbound SCTP sockets when selecting source addresses, reporting IP-addresses to the peer during the handshake, adding addresses to the host, reporting the addresses via the sysctl interface (used by netstat, for example) and reporting the addresses to the application via socket options. This issue was reported by Bernd Walter. Approved by: re (glebius@) 2014-05-16T05:06:46Z Pyun YongHyeon yongari@FreeBSD.org 2014-05-16T05:06:46Z urn:sha1:2ac9972796a98d19e549a0d354c0b783ff18f4fb Fix checksum computation. Previously it didn't include carry. 2014-05-15T20:27:57Z Michael Tuexen tuexen@FreeBSD.org 2014-05-15T20:27:57Z urn:sha1:ce4fd9cd59d16b756ebd777ea4c68f8b516d934e For some UDP packets (for example with 200 byte payload) and IP options, the IP header and the UDP header are not in the same mbuf. Add code to in_delayed_cksum() to deal with this case. Use KASSERTs as suggested by glebius@ 2014-05-15T20:24:51Z Michael Tuexen tuexen@FreeBSD.org 2014-05-15T20:24:51Z urn:sha1:3ec965ad63086bb9a120f528c00a271703419570 Remove unused code. This is triggered by the bugreport of Sylvestre Ledru which deal with useless code in the user land stack: https://bugzilla.mozilla.org/show_bug.cgi?id=1003929 2014-05-15T20:21:19Z Michael Tuexen tuexen@FreeBSD.org 2014-05-15T20:21:19Z urn:sha1:bb20c13fdcec8205e5796216db61018e1d2ccc84 Don't free an mbuf twice. This only happens in very rare error cases where the peer sends illegal sequencing information in DATA chunks for an existing association. 2014-05-15T20:19:33Z Michael Tuexen tuexen@FreeBSD.org 2014-05-15T20:19:33Z urn:sha1:a98adc253a6b0771109dea3c2afd4c7cb0afbded Add consistency checks to ensure that fragments of a user message have the same U-bit. 2014-05-15T20:17:20Z Michael Tuexen tuexen@FreeBSD.org 2014-05-15T20:17:20Z urn:sha1:706c613052e651f04e332906069ff81a6f1e36e1 Send also a packet containing an ABORT chunk in response to an OOTB packet containing a COOKIE-ECHO chunk. 2014-05-15T20:15:42Z Michael Tuexen tuexen@FreeBSD.org 2014-05-15T20:15:42Z urn:sha1:dc82196bb9ae1ccae11d124bd0cc2a2e1851bb0c Use consistently debug output instead of an unconditional printf.