wireguard-openbsd/sys/netinet6, branch master WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/sys/netinet6?h=master 2021-03-15T17:28:45Z Clear AUTOCONF6TEMP flag when we detach inet6. 2021-03-15T17:28:45Z florian florian@openbsd.org 2021-03-15T17:28:45Z urn:sha1:12e6f0c944fc018c6835823b50a56706ea39771c spelling 2021-03-10T10:21:47Z jsg jsg@openbsd.org 2021-03-10T10:21:47Z urn:sha1:678831be5eff0bcb5217b54d0dcfb6698acf8411 ok gnezdo@ semarie@ mpi@ We no longer "accept" RAs in the kernel, delete misleading comment. 2021-03-08T16:49:07Z florian florian@openbsd.org 2021-03-08T16:49:07Z urn:sha1:688918c5199d4a22e9790c15c9b86edc230948f7 Refactor ip_fragment() and ip6_fragment(). Use a mbuf list to 2021-03-01T11:05:42Z bluhm bluhm@openbsd.org 2021-03-01T11:05:42Z urn:sha1:2818ef99e36cb3e1aa903761b5b1dde22c59b89f simplify the handling of the fragment list. Now the functions ip_fragment() and ip6_fragment() always consume the mbuf. They free the mbuf and mbuf list in case of an error and take care about the counter. Adjust the code a bit to make v4 and v6 look similar. Fixes a potential mbuf leak when pf_route6() called pf_refragment6() and it failed. Now the mbuf is always freed by ip6_fragment(). OK dlg@ mvs@ we don't have to cast to caddr_t when calling m_copydata anymore. 2021-02-25T02:48:19Z dlg dlg@openbsd.org 2021-02-25T02:48:19Z urn:sha1:5c7fed39bd376c774afa6b5ea3c41fd50de48416 the first cut of this diff was made with coccinelle using this spatch: @rule@ type caddr_t; expression m, off, len, cp; @@ -m_copydata(m, off, len, (caddr_t)cp) +m_copydata(m, off, len, cp) i had fix it's opinionated idea of formatting by hand though, so i'm not sure it was worth it. ok deraadt@ bluhm@ Use NULL instead of 0 in `m_nextpkt' assignment. 2021-02-23T11:43:40Z mvs mvs@openbsd.org 2021-02-23T11:43:40Z urn:sha1:254bd8f22547979836e70833bca874f274e40b6a ok deraadt@ dlg@ Swap faddr/laddr and fport/lport arguments in call to stoeplitz_ipXport(). 2021-02-11T10:41:19Z patrick patrick@openbsd.org 2021-02-11T10:41:19Z urn:sha1:f5bb2424450655985b56f370e46a511bf608164c Technically the whole point of the stoeplitz API is that it's symmetric, meaning that the order of addresses and ports doesn't matter and will produce the same hash value. Coverity CID 1501717 ok dlg@ As done for the AF_INET multicast case, ensure that passed interface 2021-02-02T17:55:12Z claudio claudio@openbsd.org 2021-02-02T17:55:12Z urn:sha1:1d88f30e2953cd9d5feedea5735fd54739e644aa via index is actually in the right rdomain for the socket. OK bluhm@ mvs@ KNF, move { up to if () statement 2021-02-02T17:53:02Z claudio claudio@openbsd.org 2021-02-02T17:53:02Z urn:sha1:70646e3d11ea5cc23e1a4aa2ee3ecc4af0dd36b8 Fix path MTU discovery for ESP tunneled in IPv6. We always want 2021-02-01T13:25:04Z bluhm bluhm@openbsd.org 2021-02-01T13:25:04Z urn:sha1:89de4c798c8a4662405a390fcbdd22fbde0f69b0 short TCP segments or fragments encapsulated in ESP instead of fragmented ESP packets. Pass the don't fragment flag down along the stack so that dynamic routes with MTU are created eventually. with and OK markus@; OK tobhe@