opnsense-src/sys
George V. Neville-Neil 528d5d75e9 Address issue pointed out in CVE-2020-25705
Add jitter to the ICMP bandwidth limit to deny a side-channel port scan.

Reviewed by:	kp, philip, cy, emaste
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D27354

(cherry picked from commit ca4cd20c4a)
2022-04-07 09:35:36 +02:00
..
amd64 Fix the spelling of EFI_PAGE_SIZE 2022-04-04 10:37:06 +01:00
arm Fix the spelling of EFI_PAGE_SIZE 2022-04-04 10:37:06 +01:00
arm64 Remove a redundant L1_BLOCK == L2_BLOCK check 2022-04-04 10:37:07 +01:00
bsm Add aio_writev and aio_readv 2021-01-02 19:57:58 -07:00
cam CTL: Rework 05c3e8e871 using %zu format. 2022-03-28 21:30:48 -04:00
cddl fbt: Add support for CTFv3 containers 2022-04-06 20:30:44 -04:00
compat LinuxKPI: 802.11: fix RSSI (and NF) 2022-04-05 14:47:13 +00:00
conf sdhci_xenon: add ACPI support 2022-03-30 00:24:27 +02:00
contrib sys/contrib/zlib: Always define Z_U8 and Z_U4 2022-04-04 11:58:10 -04:00
crypto armv8crypto: Remove leftover debug printfs 2022-03-18 11:31:57 -04:00
ddb ddb: reliably fail with ambiguous commands 2021-07-02 14:13:24 -07:00
dev stge: fix null pointer dereference 2022-04-06 20:30:45 -04:00
dts add overlay for enabling i2c1 on allwinner h3 2022-02-09 11:35:59 +02:00
fs nfsclient: Fix a typos in source code comments 2022-03-30 18:38:15 +02:00
gdb gdb(4): Do not use run length encoding for 3-symbol repetitions 2022-02-04 20:58:34 -05:00
geom GEOM: Make G_F_CTLDUMP also dump result. 2022-04-05 22:07:40 -04:00
gnu Remove the old dts imported tree. 2021-01-15 20:09:55 +01:00
i386 x86: Probe the TSC frequency earlier 2022-03-31 12:05:25 -04:00
isa Remove more remnants of sio(4) 2021-04-14 09:19:49 -04:00
kern linker: Permit CTFv3 containers 2022-04-06 20:30:44 -04:00
kgssapi State kgssapi dependency on xdr. 2020-09-17 22:29:38 +00:00
libkern Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2022-02-08 15:00:55 -05:00
mips sched: separate out schedinit_ap() 2022-02-10 14:55:29 -06:00
modules zfs: merge openzfs/zfs@52bad4f23 (zfs-2.1-release) into stable/13 2022-03-29 12:49:44 +02:00
net vxlan(4): Fix two typos in sysctl descriptions 2022-04-02 15:33:48 +02:00
net80211 net80211: validate Mesh ID length in ieee80211_parse_beacon 2022-04-05 18:59:22 -04:00
netgraph netgraph(3): Fix a typo in a source code comment 2022-04-02 15:29:26 +02:00
netinet Address issue pointed out in CVE-2020-25705 2022-04-07 09:35:36 +02:00
netinet6 netinet6: Fix a typo in a source code comment 2022-04-02 15:31:45 +02:00
netipsec syncache: accept packet with no SA when TCP_MD5SIG is set 2022-02-10 10:31:33 -09:00
netpfil pf: Initialize the table entry zone limit at initialization time 2022-04-02 11:18:15 -04:00
netsmb netsmb: Avoid a read-after-free in smb_t2_request_int() 2021-06-02 09:34:47 -04:00
nfs nfs: don't truncate directory cookies to 32-bits in the NFS server 2022-01-02 20:09:15 -07:00
nfsclient
nfsserver nfs: Mark unused statistics variable as reserved 2020-11-18 04:35:49 +00:00
nlm nlm: clean up empty lines in .c and .h files 2020-09-01 22:14:52 +00:00
ofed ibcore: Fix multiple includes of same header file. 2022-03-10 09:18:02 +01:00
opencrypto opencrypto: Add a routine to copy a crypto buffer cursor 2022-03-18 11:31:33 -04:00
powerpc powerpcspe: fix PCI enumeration on ppce500 2022-03-25 08:07:09 -03:00
riscv riscv: Add support for enabling SV48 mode 2022-03-14 10:45:49 -04:00
rpc rpc: Delete AUTH_NEEDS_TLS(_MUTUAL_HOST) auth_stat values 2021-12-29 17:23:30 -08:00
security mac_veriexec: Fix a typo in a source code comment 2022-03-30 18:37:36 +02:00
sys ctf: Add v3 support to CTF tools, ctf{convert,dump,merge} 2022-04-06 20:30:45 -04:00
teken loader: implement framebuffer console 2021-01-02 21:41:36 +02:00
tests routing: add IPv6 fib validation procedure. 2021-09-07 21:02:58 +00:00
tools Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2022-02-08 15:00:55 -05:00
ufs ffs(3): Fix a common typo in source code comments 2022-04-02 15:34:01 +02:00
vm uma: Use the correct type for a return value 2022-04-06 20:30:45 -04:00
x86 xen(4): Fix a few typos in source code comments 2022-04-02 15:33:07 +02:00
xdr xdr: clean up empty lines in .c and .h files 2020-09-01 22:13:28 +00:00
xen xen(3): Fix a typo in a source code comment 2022-04-02 15:32:40 +02:00
Makefile