| created | 2024-07-03T21:51:01Z |
|---|---|
| begin | 2024-06-20T00:00:00Z |
| end | 2024-06-21T00:00:00Z |
| path | src/sys |
| commits | 6 |
| date | 2024-06-20T10:46:11Z | |||
|---|---|---|---|---|
| author | aoyama | |||
| files | src/sys/arch/m88k/include/cpu.h | log | diff | annotate |
| message |
Enable uvm percpu caches on luna88k. It survives 3.5 days "make build" and makes about 1.5% faster on 3 CPU machine:-) ok miod@ phessler@ dlg@ |
|||
| date | 2024-06-20T19:25:04Z | |||
|---|---|---|---|---|
| author | bluhm | |||
| files | src/sys/netinet/ip_icmp.c | log | diff | annotate |
| message |
Do not send ICMP redirect if IP forwarding is IPsec only. If sysctl net.inet.ip.forwarding is set to 2, only packets processed by IPsec are forwarded. I this case behave more like a router than a host and do not accept ICMP redirect packets. OK deraadt@ sashan@ florian@ claudio@ |
|||
| date | 2024-06-20T19:25:42Z | |||
|---|---|---|---|---|
| author | bluhm | |||
| files | src/sys/net/if.c | log | diff | annotate |
| src/sys/net/pf.c | log | diff | annotate | |
| src/sys/net/pf_norm.c | log | diff | annotate | |
| src/sys/netinet/ip_carp.c | log | diff | annotate | |
| src/sys/netinet6/icmp6.c | log | diff | annotate | |
| src/sys/netinet6/ip6_forward.c | log | diff | annotate | |
| src/sys/netinet6/ip6_input.c | log | diff | annotate | |
| src/sys/netinet6/ip6_var.h | log | diff | annotate | |
| src/sys/netinet6/nd6.c | log | diff | annotate | |
| src/sys/netinet6/nd6_nbr.c | log | diff | annotate | |
| message |
Read IPv6 forwarding value only once while processing a packet. IPv4 uses IP_FORWARDING to pass down a consistent value of net.inet.ip.forwarding down the stack. This is needed for unlocking sysctl. Do the same for IPv6. Read ip6_forwarding once in ip6_input_if() and pass down IPV6_FORWARDING as flags to ip6_ours(), ip6_hbhchcheck(), ip6_forward(). Replace the srcrt value with IPV6_REDIRECT flag for consistency with IPv4. To have common syntax with IPv4, use ip6_forwarding == 0 checks instead of !ip6_forwarding. This will also make it easier to implement net.inet6.ip6.forwarding=2 for IPsec only forwarding later. In nd6_ns_input() and nd6_na_input() read ip6_forwarding once and store it in i_am_router. The variable name has been chosen to avoid confusion with is_router, which indicates router flag of the packet. Reading of ip6_forwarding is done independently from ip6_input_if(), consistency does not really matter. One is for ND router behavior the other for forwarding. Again use the ip6_forwarding != 0 check, so when ip6_forwarding IPsec only value 2 gets implemented, it will behave like a router. OK deraadt@ sashan@ florian@ claudio@ |
|||
| date | 2024-06-20T21:52:08Z | |||
|---|---|---|---|---|
| author | kettenis | |||
| files | src/sys/arch/arm64/stand/efiboot/efiboot.c | log | diff | annotate |
| message |
Instead of allocating an arbitrary amount of extra space, let the EFI devicetree fixup protocol less us how much space it needs. Pointed out by Heinrich Schuchardt ok tobhe@, mlarkin@ |
|||
| date | 2024-06-20T22:03:02Z | |||
|---|---|---|---|---|
| author | kettenis | |||
| files | src/sys/arch/riscv64/stand/efiboot/efiboot.c | log | diff | annotate |
| message |
Instead of allocating an arbitrary amount of extra space, let the EFI devicetree fixup protocol less us how much space it needs. Pointed out by Heinrich Schuchardt ok tobhe@, mlarkin@ |
|||
| date | 2024-06-20T22:03:23Z | |||
|---|---|---|---|---|
| author | kettenis | |||
| files | src/sys/arch/armv7/stand/efiboot/efiboot.c | log | diff | annotate |
| message |
Instead of allocating an arbitrary amount of extra space, let the EFI devicetree fixup protocol less us how much space it needs. Pointed out by Heinrich Schuchardt ok tobhe@, mlarkin@ |
|||