upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-20 00:45:45 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/sys
History
Kristof Provost 70e8fe5eee pf: Fix IP checksum on reassembly 
If we reassemble a packet we modify the IP header (to set the length and
remove the fragment offset information), but we failed to update the
checksum. On certain setups (mostly where we did not re-fragment again
afterwards) this could lead to us sending out packets with incorrect
checksums.

PR:		255432
MFC after:	1 week
Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D30026

(cherry picked from commit 055c55abef)
2021-05-07 10:16:02 +02:00
..
amd64 amd64: invalidate TLB between page table update and access 2021-05-07 03:35:54 +03:00
arm gdb: report specific stop reason for watchpoints 2021-04-21 10:20:33 -03:00
arm64 gdb: report specific stop reason for watchpoints 2021-04-21 10:20:33 -03:00
bsm Add aio_writev and aio_readv 2021-01-02 19:57:58 -07:00
cam Introduce "soft" serseq variant. 2021-05-05 23:18:38 -04:00
cddl fbt: Remove some handling for multiple CTF containers 2021-04-15 21:27:24 -04:00
compat linuxkpi: Introduce tasklet_disable_nosync() 2021-04-30 17:55:47 -07:00
conf pf: Introduce nvlist variant of DIOCADDRULE 2021-05-07 10:15:41 +02:00
contrib zfs: merge openzfs/zfs@3522f57b6 (master) 2021-04-22 17:03:06 +02:00
crypto armv8crypto: note derivation in armv8_crypto_wrap.c 2021-03-22 13:14:51 -03:00
ddb ddb: replace watchpoint set/clear functions 2021-04-21 10:20:33 -03:00
dev fwip(4): fixing kernel panic when receiving unicast packet 2021-05-06 13:23:00 +00:00
dts Switch to the new device-tree vendor tree 2021-01-15 20:08:39 +01:00
fs nfscommon: fix function name in comment 2021-05-03 17:41:48 -07:00
gdb gdb: report specific stop reason for watchpoints 2021-04-21 10:20:33 -03:00
geom gmirror: Pre-allocate the timeout event structure 2021-03-17 21:24:20 -04:00
gnu Remove the old dts imported tree. 2021-01-15 20:09:55 +01:00
i386 x86: use x86_clear_dbregs() on fork 2021-04-23 14:14:08 +03:00
isa Remove more remnants of sio(4) 2021-04-14 09:19:49 -04:00
kern pipe: Avoid calling selrecord() on a closing pipe 2021-05-05 11:01:43 -04:00
kgssapi State kgssapi dependency on xdr. 2020-09-17 22:29:38 +00:00
libkern tests/sys/kern/crc32: Check for SSE4.2 before using it 2021-04-22 10:41:09 +01:00
mips gdb: report specific stop reason for watchpoints 2021-04-21 10:20:33 -03:00
modules pf: Introduce nvlist variant of DIOCADDRULE 2021-05-07 10:15:41 +02:00
net pf: PFRULE_REFS should not be user-visible 2021-05-07 10:15:43 +02:00
net80211 net80211: Fix a typo in a comment 2021-03-20 11:13:31 +01:00
netgraph ng_ubt: Block attachment of uninitialized Intel Wireless 7265 2021-04-30 23:14:44 +03:00
netinet tcp: stop spurious rescue retransmissions and potential asserts 2021-05-01 10:26:53 +02:00
netinet6 Flush remaining routes from the routing table during VNET shutdown. 2021-03-13 20:19:17 +00:00
netipsec Convert unmapped mbufs before computing checksums in IPsec. 2021-01-19 11:52:00 -08:00
netpfil pf: Fix IP checksum on reassembly 2021-05-07 10:16:02 +02:00
netsmb net: clean up empty lines in .c and .h files 2020-09-01 21:19:14 +00:00
nfs nfs: clean up empty lines in .c and .h files 2020-09-01 21:25:39 +00:00
nfsclient nfs: clean up empty lines in .c and .h files 2020-09-01 21:25:39 +00:00
nfsserver nfs: Mark unused statistics variable as reserved 2020-11-18 04:35:49 +00:00
nlm nlm: clean up empty lines in .c and .h files 2020-09-01 22:14:52 +00:00
ofed MFC 4e38478c59: 2021-04-01 11:19:42 +02:00
opencrypto Fix a typo in a comment: frame -> framework. 2021-04-26 12:01:37 -07:00
powerpc opal_console: fix serial console output corruption on powerpc64 2021-05-07 02:33:39 -03:00
riscv ddb: replace watchpoint set/clear functions 2021-04-21 10:20:33 -03:00
rpc nfsv4 client: do the BindConnectionToSession as required 2021-04-29 17:43:50 -07:00
security close_range: add audit support 2021-03-17 22:22:48 +00:00
sys ioccom: define ioctl cmd value that can never be valid 2021-05-07 03:36:00 +03:00
teken loader: implement framebuffer console 2021-01-02 21:41:36 +02:00
tests Enable running fib tests inside vnet jail. 2021-01-17 20:32:26 +00:00
tools Switch to the new device-tree vendor tree 2021-01-15 20:08:39 +01:00
ufs b_vflags update requries bufobj lock 2021-04-23 14:14:10 +03:00
vm uma: Introduce per-domain reclamation functions 2021-04-28 10:00:52 -04:00
x86 Balance parentheses in sysctl descriptions 2021-05-05 13:04:58 +02:00
xdr xdr: clean up empty lines in .c and .h files 2020-09-01 22:13:28 +00:00
xen xen: remove .swp file from public headers 2021-01-11 18:14:11 +01:00
Makefile Remove sparc64 kernel support 2020-02-03 17:35:11 +00:00