![[BACK]](/icons/back.gif){kind=icon}
Up to [local] / src / sys / netinet6
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.13.2.2, Mon May 14 22:40:21 2001 UTC (23 years, 1 month ago) by niklas
Branch: SMP
Changes since 1.13.2.1: +2 -2 lines
FILE REMOVED
merge in approximately 2.9 into SMP branch
Revision 1.28, Thu Feb 8 18:46:23 2001 UTC (23 years, 4 months ago) by itojun
Branch: MAIN
CVS Tags: UBC_SYNC_B,
UBC_SYNC_A,
SMP_SYNC_B,
SMP_SYNC_A,
HEAD
Changes since 1.27: +2 -2 lines
FILE REMOVED
witch raw ip6 socket code from NRL to kame. makes upgrades/code sharing much easier.
Revision 1.27 / (download) - annotate - [select for diffs], Thu Jul 27 06:29:10 2000 UTC (23 years, 10 months ago) by itojun
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE,
OPENBSD_2_8
Changes since 1.26: +2 -17 lines
Diff to previous 1.26 (colored)
raw6/udp6 sockets are okay with :: in src.
Revision 1.26 / (download) - annotate - [select for diffs], Thu Jul 27 04:05:27 2000 UTC (23 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.25: +18 -2 lines
Diff to previous 1.25 (colored)
be proactive about unspecified IPv6 source address. pcb layer uses unspecified address (::) to mean "unbounded" or "unconnected", and can be confused by packets from outside. use of :: as source is not documented well in IPv6 specification. not sure if it presents a real threat. the worst case scenario is a DoS against TCP listening socket: - outsider transmit TCP SYN with :: as IPv6 source - receiving side creates TCP control block with: local address = my addres remote address = :: (meaning "unconnected") state = SYN_RCVD note that SYN ACK will not be sent due to ip6_output() filter. this stays until it timeouts. - the TCP control block prevents listening TCP control block from being contacted (DoS).
Revision 1.25 / (download) - annotate - [select for diffs], Thu Jul 13 13:41:45 2000 UTC (23 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.24: +28 -3 lines
Diff to previous 1.24 (colored)
enable setsockopt related to IPv6 multicast routing.
Revision 1.24 / (download) - annotate - [select for diffs], Wed Jun 21 18:42:19 2000 UTC (23 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.23: +6 -3 lines
Diff to previous 1.23 (colored)
fix KAME PR 261.
Revision 1.23 / (download) - annotate - [select for diffs], Sun Jun 18 19:56:55 2000 UTC (23 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.22: +11 -8 lines
Diff to previous 1.22 (colored)
more mbuf sanity check
Revision 1.22 / (download) - annotate - [select for diffs], Sun Jun 18 19:11:17 2000 UTC (23 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.21: +582 -576 lines
Diff to previous 1.21 (colored)
KNF
Revision 1.21 / (download) - annotate - [select for diffs], Sun Jun 18 19:07:27 2000 UTC (23 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.20: +2 -13 lines
Diff to previous 1.20 (colored)
remove remains from NRL ipsec code
Revision 1.20 / (download) - annotate - [select for diffs], Sun Jun 18 18:59:12 2000 UTC (23 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.19: +7 -6 lines
Diff to previous 1.19 (colored)
split long "if" case (cosmetic; preparation for KNF)
Revision 1.19 / (download) - annotate - [select for diffs], Sun Jun 18 18:41:36 2000 UTC (23 years, 11 months ago) by itojun
Branch: MAIN
Changes since 1.18: +102 -123 lines
Diff to previous 1.18 (colored)
sync with more recent kame. updates scoped address handling and checksum option.
Revision 1.18 / (download) - annotate - [select for diffs], Tue Jun 13 11:47:23 2000 UTC (24 years ago) by itojun
Branch: MAIN
Changes since 1.17: +5 -2 lines
Diff to previous 1.17 (colored)
comment out flowinfo manipulation on inbound. the spec is not very clear.
Revision 1.17 / (download) - annotate - [select for diffs], Sat May 13 21:31:18 2000 UTC (24 years, 1 month ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE,
OPENBSD_2_7
Changes since 1.16: +10 -5 lines
Diff to previous 1.16 (colored)
plug an mbuf leak
Revision 1.16 / (download) - annotate - [select for diffs], Sun Apr 30 14:55:26 2000 UTC (24 years, 1 month ago) by itojun
Branch: MAIN
Changes since 1.15: +3 -3 lines
Diff to previous 1.15 (colored)
allow compilation without -Ox. we may want to simplify #ifdefs more, after 2.7 is out.
Revision 1.13.2.1 / (download) - annotate - [select for diffs], Thu Mar 2 07:04:46 2000 UTC (24 years, 3 months ago) by niklas
Branch: SMP
Changes since 1.13: +72 -3 lines
Diff to previous 1.13 (colored)
Sync with -current
Revision 1.15 / (download) - annotate - [select for diffs], Mon Feb 28 16:40:39 2000 UTC (24 years, 3 months ago) by itojun
Branch: MAIN
Changes since 1.14: +71 -3 lines
Diff to previous 1.14 (colored)
- check raw socket icmp6 filter only if the packet is icmp6. - allow setting raw socket icmp6 filter only if it is IPPROTO_ICMPV6 socket. (cmetz may object about above two items...) - add rip6_ctlinput, to flush cached router properly on redirects.
Revision 1.14 / (download) - annotate - [select for diffs], Mon Feb 28 11:55:23 2000 UTC (24 years, 3 months ago) by itojun
Branch: MAIN
Changes since 1.13: +3 -2 lines
Diff to previous 1.13 (colored)
bring in recent KAME changes (only important and stable ones, as usual). - remove net.inet6.ip6.nd6_proxyall. introduce proxy NDP code works just like "arp -s". - revise source address selection. be more careful about use of yet-to-be-valid addresses as source. - as router, transmit ICMP6_DST_UNREACH_BEYONDSCOPE against out-of-scope packet forwarding attempt. - path MTU discovery takes care of routing header properly. - be more strict about mbuf chain parsing. - nuke xxCTL_VARS #define, they are for BSDI. - disable SIOCSIFDSTADDR_IN6/SIOCSIFNETMASK_IN6 ioctl, they do not fit IPv6 model where multiple address on interface is normal. (kernel side supports them for a while for backward compat, the support will be nuked shortly) - introduce "default outgoing interface" (for spec conformance in very rare case)
Revision 1.13 / (download) - annotate - [select for diffs], Mon Feb 7 06:09:10 2000 UTC (24 years, 4 months ago) by itojun
Branch: MAIN
CVS Tags: SMP_BASE
Branch point for: SMP
Changes since 1.12: +4 -4 lines
Diff to previous 1.12 (colored)
fix include file path related to ip6.
Revision 1.12 / (download) - annotate - [select for diffs], Wed Jan 5 17:30:52 2000 UTC (24 years, 5 months ago) by itojun
Branch: MAIN
Changes since 1.11: +10 -60 lines
Diff to previous 1.11 (colored)
clarify rip6_ctloutput().
Revision 1.11 / (download) - annotate - [select for diffs], Tue Dec 21 15:41:08 1999 UTC (24 years, 5 months ago) by itojun
Branch: MAIN
Changes since 1.10: +9 -2 lines
Diff to previous 1.10 (colored)
be paranoid about malicious use of v4 mapped addr on v6 packet. malicious party may try to use v4 mapped addr as source/dest to confuse tcp/udp layer, or to bypass security checks, for example, naive stack can mistakingly think a packet with src = ::ffff:127.0.0.1 is from local node. (sync with kame)
Revision 1.10 / (download) - annotate - [select for diffs], Sun Dec 19 02:54:29 1999 UTC (24 years, 5 months ago) by itojun
Branch: MAIN
Changes since 1.9: +4 -2 lines
Diff to previous 1.9 (colored)
disallow AF mismatch on inbound.
Revision 1.9 / (download) - annotate - [select for diffs], Wed Dec 15 07:08:00 1999 UTC (24 years, 6 months ago) by itojun
Branch: MAIN
Changes since 1.8: +4 -3 lines
Diff to previous 1.8 (colored)
do not overwrite traffic class portion when filling in IPv6 version field.
Revision 1.8 / (download) - annotate - [select for diffs], Tue Dec 14 14:28:23 1999 UTC (24 years, 6 months ago) by angelos
Branch: MAIN
Changes since 1.7: +4 -4 lines
Diff to previous 1.7 (colored)
Change cast (and argument declaration) from int to u_long so it compiles on alpha (janjaap@stack.nl)
Revision 1.7 / (download) - annotate - [select for diffs], Fri Dec 10 10:04:29 1999 UTC (24 years, 6 months ago) by angelos
Branch: MAIN
Changes since 1.6: +5 -7 lines
Diff to previous 1.6 (colored)
Remove remaining unnecessary ifdefs (itojun will hate me for this :-)
Revision 1.6 / (download) - annotate - [select for diffs], Fri Dec 10 08:53:18 1999 UTC (24 years, 6 months ago) by angelos
Branch: MAIN
Changes since 1.5: +16 -301 lines
Diff to previous 1.5 (colored)
Add RCS tags, remove unused header files and code, remove a few unnecessary ifdefs...
Revision 1.5 / (download) - annotate - [select for diffs], Wed Dec 8 06:50:23 1999 UTC (24 years, 6 months ago) by itojun
Branch: MAIN
CVS Tags: kame_19991208
Changes since 1.4: +266 -179 lines
Diff to previous 1.4 (colored)
bring in KAME IPv6 code, dated 19991208.
replaces NRL IPv6 layer. reuses NRL pcb layer. no IPsec-on-v6 support.
see sys/netinet6/{TODO,IMPLEMENTATION} for more details.
GENERIC configuration should work fine as before. GENERIC.v6 works fine
as well, but you'll need KAME userland tools to play with IPv6 (will be
bringed into soon).
Revision 1.4 / (download) - annotate - [select for diffs], Wed Apr 28 09:28:16 1999 UTC (25 years, 1 month ago) by art
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE,
OPENBSD_2_6
Changes since 1.3: +3 -3 lines
Diff to previous 1.3 (colored)
zap the newhashinit hack. Add an extra flag to hashinit telling if it should wait in malloc. update all calls to hashinit.
Revision 1.3 / (download) - annotate - [select for diffs], Tue Mar 9 05:31:55 1999 UTC (25 years, 3 months ago) by cmetz
Branch: MAIN
CVS Tags: OPENBSD_2_5_BASE,
OPENBSD_2_5
Changes since 1.2: +13 -7 lines
Diff to previous 1.2 (colored)
Demangled the INET6 stuff so as not to require any extra options and not to be mutually exclusive with the IPSEC option.
Revision 1.2 / (download) - annotate - [select for diffs], Wed Feb 24 04:36:46 1999 UTC (25 years, 3 months ago) by cmetz
Branch: MAIN
Changes since 1.1: +7 -6 lines
Diff to previous 1.1 (colored)
Synchronized changes needed to integrate into OpenBSD with the NRL source tree so we can have a unified netinet6 directory.
Revision 1.1 / (download) - annotate - [select for diffs], Wed Jan 6 23:26:58 1999 UTC (25 years, 5 months ago) by deraadt
Branch: MAIN
first few files of NRL ipv6. This NRL release was officially exported to me by US DOD officials, with the crypto already removed.