opnsense-src/sys
Bruce M Simpson 0eebc0d7b4 Don't allow joins w/o source on an existing group.
This is almost always pilot error.

We don't need to check for group filter UNDEFINED state at t1,
because we only ever allocate filters with their groups, so we
unconditionally reject such calls with EINVAL.
Trying to change the active filter mode w/o going through IP_MSFILTER
is also disallowed.

Deals with the case described in PR 137164 upfront, cumulative
with the fix in svn rev 197132 which only calls imo_match_source()
if the source address family was not unspecified.

PR:		137164
MFC after:	5 days
2009-09-12 20:18:23 +00:00
..
amd64 Consolidate CPUID to CPU family/model macros for amd64 and i386 to reduce 2009-09-10 17:27:36 +00:00
arm Get rid of the _NO_NAMESPACE_POLLUTION kludge by creating an 2009-09-08 20:45:40 +00:00
boot If the pxe client is told to use / as the root path, honour that rather 2009-09-10 22:05:43 +00:00
bsm Import OpenBSM 1.1p1 from vendor branch to 8-CURRENT, populating 2009-07-17 14:02:20 +00:00
cam Use C99 initialization for struct filterops. 2009-09-12 20:03:45 +00:00
cddl - Protect reclaim with z_teardown_inactive_lock. 2009-09-12 19:53:31 +00:00
compat As jhb@ pointed out to me, r197057 was incorrect, not least because these 2009-09-10 13:20:27 +00:00
conf Catch up with ACPICA 20090903. 2009-09-11 22:49:34 +00:00
contrib Canonify include paths for newly added files. 2009-09-11 22:56:08 +00:00
crypto Changed to M_NOWAIT when reallocing psc_buf in padlock_sha_update(), 2009-05-27 09:52:12 +00:00
ddb Merge the remainder of kern_vimage.c and vimage.h into vnet.c and 2009-08-01 19:26:27 +00:00
dev Commit a change that I missed in the previous commit. 2009-09-12 14:46:22 +00:00
fs Use C99 initialization for struct filterops. 2009-09-12 20:03:45 +00:00
gdb Commit SYSINIT() ;-adding patch missed in previous pass. 2008-03-16 13:02:04 +00:00
geom Remove unused variable. 2009-09-08 17:20:17 +00:00
gnu Fix the build by using proper format. 2009-06-25 16:48:13 +00:00
i386 Use C99 initialization for struct filterops. 2009-09-12 20:03:45 +00:00
ia64 Get rid of the _NO_NAMESPACE_POLLUTION kludge by creating an 2009-09-08 20:45:40 +00:00
isa Tweak the way that the ACPI and ISA bus drivers match hint devices to 2009-08-24 21:51:46 +00:00
kern Use C99 initialization for struct filterops. 2009-09-12 20:03:45 +00:00
kgssapi When the KOBJMETHOD() macro was updated, it resulted in the 2009-06-14 17:33:46 +00:00
libkern done method is supposed to return int. 2009-06-22 22:09:18 +00:00
mips Get rid of the _NO_NAMESPACE_POLLUTION kludge by creating an 2009-09-08 20:45:40 +00:00
modules Catch up with ACPICA 20090903. 2009-09-11 22:49:34 +00:00
net Use C99 initialization for struct filterops. 2009-09-12 20:03:45 +00:00
net80211 Revert previous commit and add myself to the list of people who should 2009-09-08 13:19:05 +00:00
netatalk Reverse misordered unlock and lock in at_control for netatalk phase I 2009-08-12 10:44:13 +00:00
netgraph Get those pesky RFCOMM RPM data bits right. This is likely a noop. 2009-09-10 23:30:13 +00:00
netinet Don't allow joins w/o source on an existing group. 2009-09-12 20:18:23 +00:00
netinet6 The addresses that are assigned to the loopback interface 2009-09-05 20:24:37 +00:00
netipsec Silent gcc? Yeah, you wish. What I ment was to silence gcc. 2009-09-06 19:05:03 +00:00
netipx Use queue(9) instead of hand-crafted link lists for the global IPX 2009-06-24 20:57:50 +00:00
netnatm Reimplement the netisr framework in order to support parallel netisr 2009-06-01 10:41:38 +00:00
netncp Retire the MALLOC and FREE macros. They are an abomination unto style(9). 2008-10-23 15:53:51 +00:00
netsmb Don't print out a message on loading a module. 'kldload -v' and 'kldstat 2009-09-10 18:33:08 +00:00
nfs Revert rev 192323 (nfs_common.c only): 2009-07-12 03:53:52 +00:00
nfsclient Add LK_NOWITNESS to the vn_lock() calls done on newly created nfs 2009-09-09 20:37:49 +00:00
nfsserver Correct typo after manual patching. 2009-09-09 13:23:26 +00:00
nlm Since svc_[dg|vc|tli|tp]_create() did not hold a reference count on the 2009-06-17 22:50:26 +00:00
opencrypto If crypto operation is finished with EAGAIN, don't repeat operation from 2009-09-04 09:48:18 +00:00
pc98 MFi386: Remove old file. 2009-09-09 10:05:50 +00:00
pci intpm: add support for smbus controller found in AMD SB700 2009-09-12 18:24:31 +00:00
powerpc Add a few SCSI controllers to GENERIC that can be found on Powermacs. 2009-09-10 21:25:05 +00:00
rpc Fix NFS panics with options VIMAGE kernels by apropriately setting curvnet 2009-08-24 10:09:30 +00:00
security Having thrown the cat out of the house, add a necessary include. 2009-09-08 13:24:36 +00:00
sparc64 Get rid of the _NO_NAMESPACE_POLLUTION kludge by creating an 2009-09-08 20:45:40 +00:00
sun4v Get rid of the _NO_NAMESPACE_POLLUTION kludge by creating an 2009-09-08 20:45:40 +00:00
sys If a certain feature that was present in FreeBSD 7 was removed or changed in 2009-09-10 08:33:28 +00:00
teken Commit all local modifications I have to libteken: 2009-09-12 12:44:21 +00:00
tools - Increase dynamic range of filter coefficients from 28bit to 30bit. 2009-07-05 18:15:06 +00:00
ufs Remove useless variable assignment. 2009-09-08 17:23:32 +00:00
vm Reintroduce the r196640, after fixing the problem with my testing. 2009-09-01 11:41:51 +00:00
xdr Add a check for a NULL mbuf ptr at the beginning of xdrmbuf_inline() 2009-08-12 16:27:51 +00:00
xen Temporarily revert the new-bus locking for 8.0 release. It will be 2009-08-20 19:17:53 +00:00
Makefile Remove the unmaintained University of Michigan NFSv4 client from 8.x 2009-05-22 12:35:12 +00:00