svn commit: r302561 - head/sbin/ipfw

2016-07-11 Thread Andrey V. Elsukov
Author: ae Date: Mon Jul 11 12:44:58 2016 New Revision: 302561 URL: https://svnweb.freebsd.org/changeset/base/302561 Log: Flush buffer after output. This fixes adding new data to already printed flows. PR: 210882 MFC after:3 days Modified: head/sbin/ipfw/dummynet.c Mod

Re: svn commit: r302081 - head/sys/netinet6

2016-06-23 Thread Andrey V. Elsukov
gt;> Approved by: re (kib) >> >> Modified: >> head/sys/netinet6/in6.c > > Cursory look tells me that this bug is also present in 10. Is that true? > If so, is it possible for you to mfc this? The patch is applicable, but due to the difference in the LLE code stable

svn commit: r302081 - head/sys/netinet6

2016-06-22 Thread Andrey V. Elsukov
Author: ae Date: Wed Jun 22 11:29:21 2016 New Revision: 302081 URL: https://svnweb.freebsd.org/changeset/base/302081 Log: Fix the NULL pointer dereference for unresolved link layer entries in the netinet6 code. Copy link layer address only when corresponding entry has LLE_VALID flag. PR

svn commit: r301717 - in head/sys: modules/tcp/fastpath netinet netinet/tcp_stacks netinet6

2016-06-08 Thread Andrey V. Elsukov
Author: ae Date: Thu Jun 9 05:48:34 2016 New Revision: 301717 URL: https://svnweb.freebsd.org/changeset/base/301717 Log: Cleanup unneded include "opt_ipfw.h". It was used for conditional build IPFIREWALL_FORWARD support. But IPFIREWALL_FORWARD option was removed a long time ago. Modifie

svn commit: r300302 - head/sys/netpfil/ipfw

2016-05-20 Thread Andrey V. Elsukov
Author: ae Date: Fri May 20 15:00:12 2016 New Revision: 300302 URL: https://svnweb.freebsd.org/changeset/base/300302 Log: Fix the regression introduced in r300143. When we are creating new dynamic state use MATCH_FORWARD direction to correctly initialize protocol's state. Modified: head/s

svn commit: r300298 - head/sys/netinet6

2016-05-20 Thread Andrey V. Elsukov
Author: ae Date: Fri May 20 12:17:40 2016 New Revision: 300298 URL: https://svnweb.freebsd.org/changeset/base/300298 Log: Remove ip6 adjusting from the place where pointer couldn't be changed. And add comment after calling PFIL hooks, where it could be changed. Modified: head/sys/netinet6/i

svn commit: r300297 - head/sys/netinet6

2016-05-20 Thread Andrey V. Elsukov
Author: ae Date: Fri May 20 12:09:10 2016 New Revision: 300297 URL: https://svnweb.freebsd.org/changeset/base/300297 Log: Remove ip6 pointer initialization and strange check from the beginning of ip6_output(). It isn't used until the first time adjusted. Remove the comment about adjusting wh

svn commit: r300202 - head/sys/netinet6

2016-05-19 Thread Andrey V. Elsukov
Author: ae Date: Thu May 19 12:45:20 2016 New Revision: 300202 URL: https://svnweb.freebsd.org/changeset/base/300202 Log: Since PFIL can change destination address, use its always actual value from mbuf when calculating path mtu. Remove now unused finaldst variable. Also constify dst argumen

svn commit: r300143 - head/sys/netpfil/ipfw

2016-05-18 Thread Andrey V. Elsukov
Author: ae Date: Wed May 18 12:53:21 2016 New Revision: 300143 URL: https://svnweb.freebsd.org/changeset/base/300143 Log: Move protocol state handling code from lookup_dyn_rule_locked() function into dyn_update_proto_state(). This allows eliminate the second state lookup in the ipfw_install_

svn commit: r300054 - head/sys/netinet6

2016-05-17 Thread Andrey V. Elsukov
Author: ae Date: Tue May 17 14:06:55 2016 New Revision: 300054 URL: https://svnweb.freebsd.org/changeset/base/300054 Log: Call RO_RTFREE() when we have detected the change of destination address, otherwise the old route will be used with new destination. MFC after:1 week Modified:

svn commit: r300045 - head/sbin/ipfw

2016-05-17 Thread Andrey V. Elsukov
Author: ae Date: Tue May 17 11:22:08 2016 New Revision: 300045 URL: https://svnweb.freebsd.org/changeset/base/300045 Log: Make `ipfw internal olist` output more user friendly. Print object type as string for known types. Obtained from:Yandex LLC Sponsored by: Yandex LLC Modifie

svn commit: r300021 - in head: sbin/ipfw sys/netinet sys/netpfil/ipfw

2016-05-17 Thread Andrey V. Elsukov
Author: ae Date: Tue May 17 07:47:23 2016 New Revision: 300021 URL: https://svnweb.freebsd.org/changeset/base/300021 Log: Make named objects set-aware. Now it is possible to create named objects with the same name in different sets. Add optional manage_sets() callback to objects rewriting

svn commit: r299420 - head/sys/netpfil/ipfw

2016-05-11 Thread Andrey V. Elsukov
Author: ae Date: Wed May 11 10:04:32 2016 New Revision: 299420 URL: https://svnweb.freebsd.org/changeset/base/299420 Log: Fix memory leak possible in error case. Use free_rule() instead of free(), it will also release memory allocated for rule counters. Obtained from:Yandex LLC

svn commit: r299152 - head/sys/netpfil/ipfw

2016-05-05 Thread Andrey V. Elsukov
Author: ae Date: Fri May 6 03:18:51 2016 New Revision: 299152 URL: https://svnweb.freebsd.org/changeset/base/299152 Log: Change the type of objhash_cb_t callback function to be able return an error code. Use it to interrupt the loop in ipfw_objhash_foreach(). Obtained from:Yandex

svn commit: r299136 - head/sys/netpfil/ipfw

2016-05-05 Thread Andrey V. Elsukov
Author: ae Date: Thu May 5 20:15:46 2016 New Revision: 299136 URL: https://svnweb.freebsd.org/changeset/base/299136 Log: Rename find_name_tlv_type() to ipfw_find_name_tlv_type() and make it global. Use it in ip_fw_table.c instead of find_name_tlv() to reduce duplicated code. Obtained f

svn commit: r298702 - head/sys/netpfil/ipfw

2016-04-27 Thread Andrey V. Elsukov
Author: ae Date: Wed Apr 27 15:28:25 2016 New Revision: 298702 URL: https://svnweb.freebsd.org/changeset/base/298702 Log: Make create_object callback optional and return EOPNOTSUPP when it isn't defined. Remove eaction_create_compat() and use designated initializers to initialize eaction_opc

svn commit: r298549 - head/sys/netipsec

2016-04-24 Thread Andrey V. Elsukov
Author: ae Date: Sun Apr 24 17:09:51 2016 New Revision: 298549 URL: https://svnweb.freebsd.org/changeset/base/298549 Log: Fix build for NOINET and NOINET6 kernels. Use own protosw structures for both address families. Check proto in encapcheck function and use -1 as proto argument in en

Re: svn commit: r298535 - head/sys/netipsec

2016-04-24 Thread Andrey V. Elsukov
On 24.04.16 19:02, Andrey V. Elsukov wrote: > On 24.04.16 18:55, Bjoern A. Zeeb wrote: >>> +#ifdef INET >>> + ipe4_cookie = encap_attach_func(AF_INET, IPPROTO_IPV4, >>> + ipcomp4_nonexp_encapcheck, &ipcomp_protosw, NULL); >>> +#

Re: svn commit: r298535 - head/sys/netipsec

2016-04-24 Thread Andrey V. Elsukov
encap_attach_func(AF_INET6, IPPROTO_IPV6, >> +ipcomp6_nonexp_encapcheck, &ipcomp_protosw, NULL); > > This looks wrong to me but also with regards to NOINET kernels won’t compile. Thanks, I'll fix NOINET kernels, but what wrong here? -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

svn commit: r298536 - head/sys/netipsec

2016-04-24 Thread Andrey V. Elsukov
Author: ae Date: Sun Apr 24 09:05:29 2016 New Revision: 298536 URL: https://svnweb.freebsd.org/changeset/base/298536 Log: Use ipsec_address() function to print IP addresses. Modified: head/sys/netipsec/key_debug.c Modified: head/sys/netipsec/key_debug.c ==

svn commit: r298535 - head/sys/netipsec

2016-04-24 Thread Andrey V. Elsukov
Author: ae Date: Sun Apr 24 09:02:17 2016 New Revision: 298535 URL: https://svnweb.freebsd.org/changeset/base/298535 Log: Handle non-compressed packets for IPComp in tunnel mode. RFC3173 says that the IP datagram MUST be sent in the original non-compressed form, when the total size of a c

svn commit: r298399 - head/sys/netipsec

2016-04-21 Thread Andrey V. Elsukov
Author: ae Date: Thu Apr 21 11:02:06 2016 New Revision: 298399 URL: https://svnweb.freebsd.org/changeset/base/298399 Log: Remove stale function declaration Modified: head/sys/netipsec/ipsec.h Modified: head/sys/netipsec/ipsec.h

svn commit: r298398 - head/sys/netipsec

2016-04-21 Thread Andrey V. Elsukov
Author: ae Date: Thu Apr 21 10:58:07 2016 New Revision: 298398 URL: https://svnweb.freebsd.org/changeset/base/298398 Log: Constify mbuf pointer for IPSEC functions where mbuf isn't modified. Modified: head/sys/netipsec/ipsec.c head/sys/netipsec/ipsec.h head/sys/netipsec/ipsec6.h head/sy

svn commit: r298016 - in head: sbin/ipfw sys/conf sys/modules/ipfw sys/netinet sys/netpfil/ipfw

2016-04-14 Thread Andrey V. Elsukov
const void *unused) IPFW_WUNLOCK(chain); IPFW_UH_WUNLOCK(chain); ipfw_destroy_tables(chain, last); + ipfw_eaction_uninit(chain, last); if (reap != NULL) ipfw_reap_rules(reap); vnet_ipfw_iface_destroy(chain); Added: head/sys/netpfil/ipfw/ip_fw_eact

svn commit: r298003 - head/sys/netpfil/ipfw

2016-04-14 Thread Andrey V. Elsukov
Author: ae Date: Thu Apr 14 21:52:31 2016 New Revision: 298003 URL: https://svnweb.freebsd.org/changeset/base/298003 Log: Change the type of 'etlv' field in struct named_object to uint16_t. It should match with the type field in struct ipfw_obj_tlv. Obtained from:Yandex LLC Spon

svn commit: r298001 - head/sys/netpfil/ipfw

2016-04-14 Thread Andrey V. Elsukov
Author: ae Date: Thu Apr 14 21:45:18 2016 New Revision: 298001 URL: https://svnweb.freebsd.org/changeset/base/298001 Log: Adjust some comments and make ref_opcode_object() static. Modified: head/sys/netpfil/ipfw/ip_fw_sockopt.c Modified: head/sys/netpfil/ipfw/ip_fw_sockopt.c

svn commit: r298000 - head/sys/netpfil/ipfw

2016-04-14 Thread Andrey V. Elsukov
Author: ae Date: Thu Apr 14 21:31:16 2016 New Revision: 298000 URL: https://svnweb.freebsd.org/changeset/base/298000 Log: o Teach opcode rewriting framework handle several rewriters for the same opcode. o Reduce number of times classifier callback is called. It is redundant to call

svn commit: r297992 - head/sys/netpfil/ipfw

2016-04-14 Thread Andrey V. Elsukov
Author: ae Date: Thu Apr 14 20:49:27 2016 New Revision: 297992 URL: https://svnweb.freebsd.org/changeset/base/297992 Log: Move several functions related to opcode rewriting framework from ip_fw_table.c into ip_fw_sockopt.c and make them static. Obtained from:Yandex LLC Modified:

svn commit: r297981 - head/sbin/ipfw

2016-04-14 Thread Andrey V. Elsukov
Author: ae Date: Thu Apr 14 18:22:08 2016 New Revision: 297981 URL: https://svnweb.freebsd.org/changeset/base/297981 Log: Fix output formatting of O_UNREACH6 opcode. Obtained from:Yandex LLC Modified: head/sbin/ipfw/ipfw2.c head/sbin/ipfw/ipfw2.h head/sbin/ipfw/ipv6.c Modifi

svn commit: r297820 - head/sbin/geom/class/part

2016-04-11 Thread Andrey V. Elsukov
Author: ae Date: Mon Apr 11 13:44:31 2016 New Revision: 297820 URL: https://svnweb.freebsd.org/changeset/base/297820 Log: Fix the problem, when gpart(8) can't write both bootcode and partcode in one command due to wrong file size limit. Do not use bootcode size to calculate partsize limit.

svn commit: r297705 - head/sys/netinet6

2016-04-08 Thread Andrey V. Elsukov
Author: ae Date: Fri Apr 8 11:13:24 2016 New Revision: 297705 URL: https://svnweb.freebsd.org/changeset/base/297705 Log: Fix regression introduced in r296986. Currently we don't keep zoneid in in6_ifaddr structure, because there is still some code, that doesn't properly initialize sin6_s

svn commit: r296984 - head/sys/netinet6

2016-03-19 Thread Andrey V. Elsukov
Author: ae Date: Thu Mar 17 10:59:30 2016 New Revision: 296984 URL: https://svnweb.freebsd.org/changeset/base/296984 Log: Change in6_selectsrc() to allow usage of non-local IPv6 addresses in IPV6_PKTINFO ancillary data when IPV6_BINDANY socket option is set. Submitted by: n_hibma MFC af

svn commit: r297014 - head/sys/netipsec

2016-03-19 Thread Andrey V. Elsukov
Author: ae Date: Fri Mar 18 09:03:00 2016 New Revision: 297014 URL: https://svnweb.freebsd.org/changeset/base/297014 Log: Fix handling of net.inet.ipsec.dfbit=2 variable. IP_DF macro is in host bytes order, but ip_off field is in network bytes order. So, use htons() for correct check. Modif

svn commit: r296986 - head/sys/netinet6

2016-03-19 Thread Andrey V. Elsukov
Author: ae Date: Thu Mar 17 11:10:44 2016 New Revision: 296986 URL: https://svnweb.freebsd.org/changeset/base/296986 Log: Reduce the number of local variables. Remove redundant check that inp pointer isn't NULL, it is safe, because we are handling IPV6_PKTINFO socket option in this block of

svn commit: r296566 - head/sbin/ipfw

2016-03-09 Thread Andrey V. Elsukov
Author: ae Date: Wed Mar 9 14:47:05 2016 New Revision: 296566 URL: https://svnweb.freebsd.org/changeset/base/296566 Log: Set buffer to empty string to prevent duplicated output in some cases. PR: 193888 Modified: head/sbin/ipfw/ipfw2.c Modified: head/sbin/ipfw/ipfw2.c ===

svn commit: r296557 - head/sys/compat/linux

2016-03-09 Thread Andrey V. Elsukov
Author: ae Date: Wed Mar 9 09:12:40 2016 New Revision: 296557 URL: https://svnweb.freebsd.org/changeset/base/296557 Log: Add support for IPPROTO_IPV6 socket layer for getsockopt/setsockopt calls. Also add mapping for several options from RFC 3493 and 3542. Reviewed by: dchagin Tested

svn commit: r296348 - head/sys/netpfil/ipfw

2016-03-03 Thread Andrey V. Elsukov
Author: ae Date: Thu Mar 3 13:07:59 2016 New Revision: 296348 URL: https://svnweb.freebsd.org/changeset/base/296348 Log: Use correct size for malloc. Obtained from:Yandex LLC MFC after:1 week Modified: head/sys/netpfil/ipfw/ip_fw_dynamic.c Modified: head/sys/netpfil/ipfw/

svn commit: r295969 - in head: sbin/ipfw sys/netpfil/ipfw

2016-02-24 Thread Andrey V. Elsukov
Author: ae Date: Wed Feb 24 13:16:03 2016 New Revision: 295969 URL: https://svnweb.freebsd.org/changeset/base/295969 Log: Fix bug in filling and handling ipfw's O_DSCP opcode. Due to integer overflow CS4 token was handled as BE. PR: 207459 MFC after:1 week Modified: hea

svn commit: r295967 - head/sys/netipsec

2016-02-24 Thread Andrey V. Elsukov
Author: ae Date: Wed Feb 24 12:28:49 2016 New Revision: 295967 URL: https://svnweb.freebsd.org/changeset/base/295967 Log: Fix useless check. m_pkthdr.len should be equal to orglen. MFC after:2 weeks Modified: head/sys/netipsec/key.c Modified: head/sys/netipsec/key.c

svn commit: r293679 - head/sys/fs/smbfs

2016-01-11 Thread Andrey V. Elsukov
Author: ae Date: Mon Jan 11 18:11:06 2016 New Revision: 293679 URL: https://svnweb.freebsd.org/changeset/base/293679 Log: Change the type of newsize argument in the smbfs_smb_setfsize() function from int to int64. MSDN says that SMB_SET_FILE_END_OF_FILE_INFO uses signed 64-bit integer to s

Re: svn commit: r292788 - in head/sys: geom/part sys

2016-01-11 Thread Andrey V. Elsukov
led from the ports in the /boot/modules. When you rebuild the kernel after merging r292788 your module will use old values of g_part_alias and thus it will get not the same aliases. You will need rebuild your module to fix this. -- WBR, Andrey V. Elsukov ___

svn commit: r293468 - head/lib/libstand

2016-01-09 Thread Andrey V. Elsukov
Author: ae Date: Sat Jan 9 08:04:29 2016 New Revision: 293468 URL: https://svnweb.freebsd.org/changeset/base/293468 Log: Make tohex() work as expected. Modified: head/lib/libstand/uuid_to_string.c Modified: head/lib/libstand/uuid_to_string.c =

svn commit: r293467 - head/lib/libstand

2016-01-09 Thread Andrey V. Elsukov
Author: ae Date: Sat Jan 9 08:02:35 2016 New Revision: 293467 URL: https://svnweb.freebsd.org/changeset/base/293467 Log: Fix a typo. PR: 205722 Modified: head/lib/libstand/uuid_to_string.c Modified: head/lib/libstand/uuid_to_string.c ==

Re: svn commit: r292788 - in head/sys: geom/part sys

2015-12-28 Thread Andrey V. Elsukov
e used by third-party kernel module and in general it is not good to change the order of elements here. This can break `gpart show` output for such modules. Just for the future. :) -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: svn commit: r292058 - head/sbin/geom/class/part

2015-12-12 Thread Andrey V. Elsukov
f them are documented in bugzilla. You also may add to the list: * GPT labels don't updated in devfs after gpart modify -l * GMIRROR failed to appears after upgrade when GRAID find stale metadata; * unable to stop some GEOM class due to retasting on the same device via GEOM label;

Re: svn commit: r292058 - head/sbin/geom/class/part

2015-12-12 Thread Andrey V. Elsukov
On 12.12.15 21:26, Ian Lepore wrote: > On Sat, 2015-12-12 at 21:10 +0300, Andrey V. Elsukov wrote: >> On 12.12.15 20:20, Ian Lepore wrote: >>> I spent much of the last week fighting with "geom destroy" and >>> trying >>> to prevent the ressurection of

Re: svn commit: r292058 - head/sbin/geom/class/part

2015-12-12 Thread Andrey V. Elsukov
't be possible to commit an outer geom if it contains > uncommitted nested geoms. Or maybe commit should have a -R flag to > recurse automatically as well (but that would have to be implemented on > the kernel side, unless there's some way to query from userland about > whe

Re: svn commit: r292058 - head/sbin/geom/class/part

2015-12-12 Thread Andrey V. Elsukov
have correct primary GPT. In this case seems all will looks good. I think we should report about such corruption. Thanks. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: svn commit: r292058 - head/sbin/geom/class/part

2015-12-10 Thread Andrey V. Elsukov
On 10.12.15 20:05, Ian Lepore wrote: > On Thu, 2015-12-10 at 10:37 +0000, Andrey V. Elsukov wrote: >> Author: ae >> Date: Thu Dec 10 10:37:12 2015 >> New Revision: 292058 >> URL: https://svnweb.freebsd.org/changeset/base/292058 >> >> Log: >> Remo

Re: svn commit: r292057 - in head/sys: boot/common geom/part

2015-12-10 Thread Andrey V. Elsukov
On 10.12.15 18:07, John Baldwin wrote: > On Thursday, December 10, 2015 10:35:07 AM Andrey V. Elsukov wrote: >> Author: ae >> Date: Thu Dec 10 10:35:07 2015 >> New Revision: 292057 >> URL: https://svnweb.freebsd.org/changeset/base/292057 >> >> Log: >>

svn commit: r292058 - head/sbin/geom/class/part

2015-12-10 Thread Andrey V. Elsukov
Author: ae Date: Thu Dec 10 10:37:12 2015 New Revision: 292058 URL: https://svnweb.freebsd.org/changeset/base/292058 Log: Remove a note about damaged PMBR. Now GPT will be detected automatically with such corruption. MFC after:1 month Modified: head/sbin/geom/class/part/gpart.8 Mo

svn commit: r292057 - in head/sys: boot/common geom/part

2015-12-10 Thread Andrey V. Elsukov
Author: ae Date: Thu Dec 10 10:35:07 2015 New Revision: 292057 URL: https://svnweb.freebsd.org/changeset/base/292057 Log: Make detection of GPT a bit more reliable. When we are detecting a partition table and didn't find PMBR, try to read backup GPT header from the last sector and if it i

svn commit: r291579 - head/sys/netinet

2015-12-01 Thread Andrey V. Elsukov
Author: ae Date: Tue Dec 1 11:24:30 2015 New Revision: 291579 URL: https://svnweb.freebsd.org/changeset/base/291579 Log: In the same way fix the problem described in r291578 for IGMPv3. In case when router has a lot of multicast groups, the reply can take several packets due to MTU limit

svn commit: r291578 - head/sys/netinet6

2015-12-01 Thread Andrey V. Elsukov
Author: ae Date: Tue Dec 1 11:17:41 2015 New Revision: 291578 URL: https://svnweb.freebsd.org/changeset/base/291578 Log: mld_v2_dispatch_general_query() is used by mld_fasttimo_vnet() to send a reply to the MLDv2 General Query. In case when router has a lot of multicast groups, the reply ca

svn commit: r291299 - head/sys/net

2015-11-25 Thread Andrey V. Elsukov
Author: ae Date: Wed Nov 25 11:31:07 2015 New Revision: 291299 URL: https://svnweb.freebsd.org/changeset/base/291299 Log: Fix the build. Modified: head/sys/net/if_enc.c Modified: head/sys/net/if_enc.c == --- head/sys

svn commit: r291292 - in head/sys: conf modules modules/if_enc net netinet netinet6 netipsec sys

2015-11-24 Thread Andrey V. Elsukov
=== --- head/sys/net/if_enc.c Wed Nov 25 07:14:58 2015(r291291) +++ head/sys/net/if_enc.c Wed Nov 25 07:31:59 2015(r291292) @@ -1,5 +1,6 @@ /*- * Copyright (c) 2006 The FreeBSD Project. + * Copyright (c) 2015 Andrey V. Elsukov * All rights reserved. * * Redis

svn commit: r291291 - head/sys/kern

2015-11-24 Thread Andrey V. Elsukov
Author: ae Date: Wed Nov 25 07:14:58 2015 New Revision: 291291 URL: https://svnweb.freebsd.org/changeset/base/291291 Log: Check that hhk_helper pointer isn't NULL before access. It isn't forbidden to use NULL pointer for hook_helper in hookinfo structure when hhook_add_hook() adds new hel

svn commit: r291222 - head/sys/netpfil/ipfw

2015-11-23 Thread Andrey V. Elsukov
Author: ae Date: Mon Nov 23 22:06:55 2015 New Revision: 291222 URL: https://svnweb.freebsd.org/changeset/base/291222 Log: Add destroy_object callback to object rewriting framework. It is called when last reference to named object is going to be released and allows to do additional cleanup fo

svn commit: r290924 - in head/sys: netipsec opencrypto

2015-11-15 Thread Andrey V. Elsukov
Author: ae Date: Mon Nov 16 07:10:42 2015 New Revision: 290924 URL: https://svnweb.freebsd.org/changeset/base/290924 Log: Use explicitly specified ivsize instead of blocksize when we mean IV size. Set zero ivsize for enc_xform_null and remove special handling from xform_esp.c. Reviewed

svn commit: r290345 - head/sys/netpfil/ipfw

2015-11-03 Thread Andrey V. Elsukov
Author: ae Date: Tue Nov 3 22:23:09 2015 New Revision: 290345 URL: https://svnweb.freebsd.org/changeset/base/290345 Log: Remove now obsolete KASSERT. Actually, object classify callbacks can skip some opcodes, that could be rewritten. We will deteremine real numbed of rewritten opcodes a bit

svn commit: r290334 - head/sys/netpfil/ipfw

2015-11-03 Thread Andrey V. Elsukov
Author: ae Date: Tue Nov 3 10:34:26 2015 New Revision: 290334 URL: https://svnweb.freebsd.org/changeset/base/290334 Log: Eliminate any conditional increments of object_opcodes in the check_ipfw_rule_body() function. This function is intended to just determine that rule has some opcodes that

svn commit: r290332 - head/sys/netpfil/ipfw

2015-11-03 Thread Andrey V. Elsukov
Author: ae Date: Tue Nov 3 10:29:46 2015 New Revision: 290332 URL: https://svnweb.freebsd.org/changeset/base/290332 Log: Add ipfw_check_object_name_generic() function to do basic checks for an object name correctness. Each type of object can do more strict checking in own implementation. Do

svn commit: r290330 - in head: sbin/ipfw sys/netinet sys/netpfil/ipfw

2015-11-03 Thread Andrey V. Elsukov
Author: ae Date: Tue Nov 3 10:21:53 2015 New Revision: 290330 URL: https://svnweb.freebsd.org/changeset/base/290330 Log: Implement `ipfw internal olist` command to list named objects. Reviewed by: melifaro Obtained from:Yandex LLC Sponsored by: Yandex LLC Modified: head/sbi

svn commit: r290116 - head/sys/net

2015-10-28 Thread Andrey V. Elsukov
Author: ae Date: Wed Oct 28 17:55:37 2015 New Revision: 290116 URL: https://svnweb.freebsd.org/changeset/base/290116 Log: Check the size of data available in mbuf, before using them. PR: 202667 MFC after:1 week Modified: head/sys/net/if_gre.c Modified: head/sys/net/if_gr

svn commit: r288529 - head/sys/net

2015-10-02 Thread Andrey V. Elsukov
Author: ae Date: Sat Oct 3 03:57:58 2015 New Revision: 288529 URL: https://svnweb.freebsd.org/changeset/base/288529 Log: Always detach encap handler when reconfiguring tunnel. Reported by: hrs MFC after:1 week Modified: head/sys/net/if_gre.c Modified: head/sys/net/if_gre.c =

svn commit: r288528 - head/sbin/ipfw

2015-10-02 Thread Andrey V. Elsukov
Author: ae Date: Sat Oct 3 03:12:57 2015 New Revision: 288528 URL: https://svnweb.freebsd.org/changeset/base/288528 Log: Fix possible segmentation fault. PR: 203494 MFC after:1 week Modified: head/sbin/ipfw/ipfw2.c Modified: head/sbin/ipfw/ipfw2.c ==

svn commit: r288418 - in head/sys: netinet netinet6 netipsec

2015-09-30 Thread Andrey V. Elsukov
Author: ae Date: Wed Sep 30 08:16:33 2015 New Revision: 288418 URL: https://svnweb.freebsd.org/changeset/base/288418 Log: Take extra reference to security policy before calling crypto_dispatch(). Currently we perform crypto requests for IPSEC synchronous for most of crypto providers (soft

svn commit: r287859 - head/sys/net

2015-09-16 Thread Andrey V. Elsukov
Author: ae Date: Wed Sep 16 13:17:00 2015 New Revision: 287859 URL: https://svnweb.freebsd.org/changeset/base/287859 Log: Use KASSERT for some checks, that are late to do. Discussed with: melifaro, glebius Modified: head/sys/net/if_ethersubr.c Modified: head/sys/net/if_ethersubr.c

svn commit: r286720 - head/sys/dev/md

2015-08-13 Thread Andrey V. Elsukov
Author: ae Date: Thu Aug 13 13:20:29 2015 New Revision: 286720 URL: https://svnweb.freebsd.org/changeset/base/286720 Log: Use g_conf_printf_escaped() to escape illegal symbols in file name. PR: 202289 MFC after:1 week Modified: head/sys/dev/md/md.c Modified: head/sys/dev

svn commit: r286195 - head/sys/netinet6

2015-08-02 Thread Andrey V. Elsukov
Author: ae Date: Sun Aug 2 12:40:56 2015 New Revision: 286195 URL: https://svnweb.freebsd.org/changeset/base/286195 Log: Properly handle IPV6_NEXTHOP socket option in selectroute(). o remove disabled code; o if nexthop address is link-local, use embedded scope zone id to determine

svn commit: r286194 - head/sys/netinet6

2015-08-02 Thread Andrey V. Elsukov
Author: ae Date: Sun Aug 2 11:58:24 2015 New Revision: 286194 URL: https://svnweb.freebsd.org/changeset/base/286194 Log: Remove redundant check. Modified: head/sys/netinet6/in6_src.c Modified: head/sys/netinet6/in6_src.c ==

svn commit: r286114 - head/sys/net

2015-07-31 Thread Andrey V. Elsukov
Author: ae Date: Fri Jul 31 09:04:22 2015 New Revision: 286114 URL: https://svnweb.freebsd.org/changeset/base/286114 Log: Ansify if_stf.c Modified: head/sys/net/if_stf.c Modified: head/sys/net/if_stf.c == --- head/sy

svn commit: r286112 - head/sys/netinet

2015-07-31 Thread Andrey V. Elsukov
Author: ae Date: Fri Jul 31 09:02:28 2015 New Revision: 286112 URL: https://svnweb.freebsd.org/changeset/base/286112 Log: Remove unneded #include "opt_inet.h". Modified: head/sys/netinet/ip_ecn.h Modified: head/sys/netinet/ip_ecn.h

svn commit: r286069 - in head/sys: modules modules/if_stf net

2015-07-30 Thread Andrey V. Elsukov
Author: ae Date: Thu Jul 30 10:26:43 2015 New Revision: 286069 URL: https://svnweb.freebsd.org/changeset/base/286069 Log: Build if_stf(4) module only when both INET and INET6 support are enabled. Modified: head/sys/modules/Makefile head/sys/modules/if_stf/Makefile head/sys/net/if_stf.c M

svn commit: r286013 - in head/sys: net netinet netinet6

2015-07-29 Thread Andrey V. Elsukov
Author: ae Date: Wed Jul 29 14:07:43 2015 New Revision: 286013 URL: https://svnweb.freebsd.org/changeset/base/286013 Log: Eliminate the use of m_copydata() in gif_encapcheck(). ip_encap already has inspected mbuf's data, at least an IP header. And it is safe to use mtod() and do direct ac

svn commit: r286003 - head/sys/netpfil/ipfw

2015-07-29 Thread Andrey V. Elsukov
Author: ae Date: Wed Jul 29 10:53:42 2015 New Revision: 286003 URL: https://svnweb.freebsd.org/changeset/base/286003 Log: Reduce overhead of ipfw's me6 opcode. Skip checks for IPv6 multicast addresses. Use in6_localip() for global unicast. And for IPv6 link-local addresses do search in

svn commit: r286001 - in head/sys: dev/cxgbe/tom net netinet netinet6

2015-07-29 Thread Andrey V. Elsukov
Author: ae Date: Wed Jul 29 08:12:05 2015 New Revision: 286001 URL: https://svnweb.freebsd.org/changeset/base/286001 Log: Convert in_ifaddr_lock and in6_ifaddr_lock to rmlock. Both are used to protect access to IP addresses lists and they can be acquired for reading several times per pack

svn commit: r285889 - head/sys/geom/part

2015-07-26 Thread Andrey V. Elsukov
Author: ae Date: Sun Jul 26 11:16:48 2015 New Revision: 285889 URL: https://svnweb.freebsd.org/changeset/base/285889 Log: Report the scheme and provider names in warning message about unaligned partition. PR: 201873 MFC after:1 week Modified: head/sys/geom/part/g_part.c

svn commit: r285888 - head/sys/kern

2015-07-26 Thread Andrey V. Elsukov
Author: ae Date: Sun Jul 26 10:53:32 2015 New Revision: 285888 URL: https://svnweb.freebsd.org/changeset/base/285888 Log: Build debug version of rmlock's methods only when LOCK_DEBUG > 0. Currently LOCK_DEBUG is always defined in sys/lock.h (0 or 1). This means that debugging code always

svn commit: r285735 - head/sbin/geom/class/part

2015-07-20 Thread Andrey V. Elsukov
Author: ae Date: Tue Jul 21 06:18:42 2015 New Revision: 285735 URL: https://svnweb.freebsd.org/changeset/base/285735 Log: lseek() allows an offset to be set beyond the end of file. Using it to check that partition has enough space to write bootcode doesn't work. Use the known size of provide

svn commit: r285712 - head/sys/netpfil/ipfw

2015-07-20 Thread Andrey V. Elsukov
Author: ae Date: Mon Jul 20 07:26:31 2015 New Revision: 285712 URL: https://svnweb.freebsd.org/changeset/base/285712 Log: Add helper functions for IP checksum adjusting. Use these functions in dummynet code and for setdscp. This fixes wrong checksums in some cases. Obtained from:Y

svn commit: r285711 - head/sys/netinet6

2015-07-19 Thread Andrey V. Elsukov
Author: ae Date: Mon Jul 20 06:58:32 2015 New Revision: 285711 URL: https://svnweb.freebsd.org/changeset/base/285711 Log: Add LLE event handler to report ND6 events to userland via rtsock. Obtained from:Yandex LLC MFC after:2 weeks Sponsored by: Yandex LLC Modified: head/

svn commit: r285710 - head/sys/netinet6

2015-07-19 Thread Andrey V. Elsukov
Author: ae Date: Mon Jul 20 06:54:50 2015 New Revision: 285710 URL: https://svnweb.freebsd.org/changeset/base/285710 Log: Invoke LLE event handler when entry is deleted. MFC after:2 weeks Sponsored by: Yandex LLC Modified: head/sys/netinet6/in6.c Modified: head/sys/netinet6/in6.c

svn commit: r285204 - head/sys/netipsec

2015-07-06 Thread Andrey V. Elsukov
Author: ae Date: Mon Jul 6 12:40:31 2015 New Revision: 285204 URL: https://svnweb.freebsd.org/changeset/base/285204 Log: Fill the port and protocol information in the SADB_ACQUIRE message in case when security policy has it as required by RFC 2367. PR: 192774 Differential Rev

svn commit: r285107 - head/sys/netinet6

2015-07-03 Thread Andrey V. Elsukov
Author: ae Date: Fri Jul 3 19:01:38 2015 New Revision: 285107 URL: https://svnweb.freebsd.org/changeset/base/285107 Log: Keep IPv6 address specified by IPV6_PKTINFO socket option in kernel internal form to be able handle link-local IPv6 addresses. Reported by: kp Tested by:kp Mod

svn commit: r284566 - head/sys/netinet

2015-06-18 Thread Andrey V. Elsukov
Author: ae Date: Thu Jun 18 18:28:38 2015 New Revision: 284566 URL: https://svnweb.freebsd.org/changeset/base/284566 Log: Fix possible use after free in encap[46]_input(). There is small window, when encap_detach() can free matched entry directly after we release encapmtx. Instead of use poi

svn commit: r284152 - in head: share/man/man4 sys/conf sys/modules/geom/geom_map

2015-06-08 Thread Andrey V. Elsukov
Author: ae Date: Mon Jun 8 13:23:56 2015 New Revision: 284152 URL: https://svnweb.freebsd.org/changeset/base/284152 Log: Add makefile to build geom_map kld. Document some GEOM_* options in NOTES and geom(4). Added: head/sys/modules/geom/geom_map/ head/sys/modules/geom/geom_map/Makefile

svn commit: r284151 - head/sys/geom/part

2015-06-08 Thread Andrey V. Elsukov
Author: ae Date: Mon Jun 8 12:52:41 2015 New Revision: 284151 URL: https://svnweb.freebsd.org/changeset/base/284151 Log: Teach G_PART_GPT class to handle g_resize_provider event. MFC after:10 days Modified: head/sys/geom/part/g_part_gpt.c Modified: head/sys/geom/part/g_part_gpt.c =

svn commit: r283897 - head/share/man/man4

2015-06-01 Thread Andrey V. Elsukov
Author: ae Date: Tue Jun 2 00:47:38 2015 New Revision: 283897 URL: https://svnweb.freebsd.org/changeset/base/283897 Log: Add example howto configure gre(4) tunnel with the same inner and outer addresses using multiple FIBs. X-MFC after: r282809 Modified: head/share/man/man4/gre.4 Mo

svn commit: r283696 - head/sys/netinet6

2015-05-29 Thread Andrey V. Elsukov
Author: ae Date: Fri May 29 10:24:16 2015 New Revision: 283696 URL: https://svnweb.freebsd.org/changeset/base/283696 Log: Move RTM announces into generic code to be independent from Layer2 code. This fixes bug introduced in 274988, when announces about new addresses don't sent for tunneling

svn commit: r283577 - head/sbin/dumpfs

2015-05-26 Thread Andrey V. Elsukov
Author: ae Date: Tue May 26 18:27:38 2015 New Revision: 283577 URL: https://svnweb.freebsd.org/changeset/base/283577 Log: Print leading zeroes of UFS2 fs_id like we do for UFS1. PR: 156908 MFC after:1 week Modified: head/sbin/dumpfs/dumpfs.c Modified: head/sbin/dumpfs/du

svn commit: r283313 - head/sys/net80211

2015-05-23 Thread Andrey V. Elsukov
Author: ae Date: Sat May 23 09:49:40 2015 New Revision: 283313 URL: https://svnweb.freebsd.org/changeset/base/283313 Log: Properly update TX statistics for wlan(4). ieee80211_pwrsave() can fail due to queue overflow, check its return code and increment oerrors counter when it fails. Also han

svn commit: r283146 - head/sys/netipsec

2015-05-20 Thread Andrey V. Elsukov
Author: ae Date: Wed May 20 11:59:53 2015 New Revision: 283146 URL: https://svnweb.freebsd.org/changeset/base/283146 Log: In the reply to SADB_X_SPDGET message use the same sequence number that was in the request. Some IKE deamons expect it will the same. Linux and NetBSD also follow this be

Re: svn commit: r283104 - head/sys/geom/uncompress

2015-05-19 Thread Andrey V. Elsukov
t will work as before. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: svn commit: r283104 - head/sys/geom/uncompress

2015-05-19 Thread Andrey V. Elsukov
or you? It isn't clear from the code, why it used "i <= total_offsets" when it filled sc->offsets, it looks like a bug for me. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

svn commit: r283117 - head/sys/netipsec

2015-05-19 Thread Andrey V. Elsukov
Author: ae Date: Tue May 19 17:14:27 2015 New Revision: 283117 URL: https://svnweb.freebsd.org/changeset/base/283117 Log: Remove unneded mbuf length adjustment, M_PREPEND() already did that. PR: 139387 MFC after:1 week Modified: head/sys/netipsec/keysock.c Modified: head

svn commit: r283104 - head/sys/geom/uncompress

2015-05-19 Thread Andrey V. Elsukov
Author: ae Date: Tue May 19 09:28:52 2015 New Revision: 283104 URL: https://svnweb.freebsd.org/changeset/base/283104 Log: Read GEOM_UNCOMPRESS metadata using several requests that fit into MAXPHYS. For large compressed images the metadata size can be bigger than MAXPHYS and this triggers KAS

svn commit: r283102 - head/sys/netipsec

2015-05-19 Thread Andrey V. Elsukov
Author: ae Date: Tue May 19 08:37:03 2015 New Revision: 283102 URL: https://svnweb.freebsd.org/changeset/base/283102 Log: Change SA's state before sending SADB_EXPIRE message. This state will be reported to keying daemon. MFC after:2 weeks Modified: head/sys/netipsec/key.c Modifie

svn commit: r283101 - head/sys/netipsec

2015-05-19 Thread Andrey V. Elsukov
Author: ae Date: Tue May 19 08:30:04 2015 New Revision: 283101 URL: https://svnweb.freebsd.org/changeset/base/283101 Log: Teach key_expire() send SADB_EXPIRE message with the SADB_EXT_LIFETIME_HARD extension header type. The key_flush_sad() now will send SADB_EXPIRE message when HARD lifetim

svn commit: r282965 - in head: sbin/ifconfig sys/net sys/netinet sys/netinet6

2015-05-15 Thread Andrey V. Elsukov
Author: ae Date: Fri May 15 12:19:45 2015 New Revision: 282965 URL: https://svnweb.freebsd.org/changeset/base/282965 Log: Add an ability accept encapsulated packets from different sources by one gif(4) interface. Add new option "ignore_source" for gif(4) interface. When it is enabled, gif's

<    1   2   3   4   5   6   7   8   9   10   >