upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-17 03:29:43 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/sys
History
John Baldwin 81b6dba1a0 ktls: Fix assertion for TLS 1.0 CBC when using non-zero starting seqno. 
The starting sequence number used to verify that TLS 1.0 CBC records
are encrypted in-order in the OCF layer was always set to 0 and not to
the initial sequence number from the struct tls_enable.

In practice, OpenSSL always starts TLS transmit offload with a
sequence number of zero, so this only matters for tests that use a
random starting sequence number.

Reviewed by:	markj
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D32676

(cherry picked from commit 4827bf76bc)
2021-11-23 15:11:45 -08:00
..
amd64 amd64: Annotate an unlikely condition in smp_targeted_tlb_shootdown() 2021-11-22 08:44:27 -05:00
arm arm: Remove unused items 2021-11-18 21:52:21 -07:00
arm64 rk805: add system poweroff support 2021-11-21 12:05:18 +02:00
bsm Add aio_writev and aio_readv 2021-01-02 19:57:58 -07:00
cam cam_periph: style change 2021-11-18 21:52:21 -07:00
cddl kern: drop remaining references to removed makesyscalls.sh 2021-09-14 20:53:03 -05:00
compat LinuxKPI: add bcd.h 2021-11-21 18:15:58 +00:00
conf pcf8574: driver for 8-pin quasi-bidirectional GPIO over I2C 2021-11-21 11:59:34 +02:00
contrib Upgrade ENA to v2.4.1 2021-10-07 18:10:32 +02:00
crypto aesni: Avoid a potential out-of-bounds load in AES_GCM_encrypt() 2021-11-23 09:32:33 -05:00
ddb ddb: reliably fail with ambiguous commands 2021-07-02 14:13:24 -07:00
dev Further refine the ExpDataSN checks for SCSI Response PDUs. 2021-11-23 15:11:44 -08:00
dts add rk3328 overlay for enabling analog sound 2021-11-21 12:04:42 +02:00
fs nfsd: Fix the NFSv4 pNFS MDS server for DS NFSERR_NOSPC 2021-11-21 07:59:49 -08:00
gdb gdb: report specific stop reason for watchpoints 2021-04-21 10:20:33 -03:00
geom g_vfs_close(): vp is unused 2021-11-19 06:25:29 +02:00
gnu Remove the old dts imported tree. 2021-01-15 20:09:55 +01:00
i386 sysbeep: Adjust interface to take a duration as a sbt 2021-11-18 21:52:22 -07:00
isa Remove more remnants of sio(4) 2021-04-14 09:19:49 -04:00
kern ktls: Ensure FIFO encryption order for TLS 1.0. 2021-11-23 15:11:44 -08:00
kgssapi
libkern Switch to an ifunc in the kernel for crc32c 2021-08-30 12:22:21 +01:00
mips Convert vm_page_alloc() callers to use vm_page_alloc_noobj(). 2021-11-03 13:39:36 -04:00
modules add rk3328 overlay for enabling analog sound 2021-11-21 12:04:42 +02:00
net if_epair: rework 2021-11-23 16:50:51 +01:00
net80211 net80211: add a driver-private pointer to struct ieee80211_node 2021-11-19 00:01:27 +00:00
netgraph ng_pptpgre(4): Fix a typo in a source code comment 2021-11-06 08:50:54 +01:00
netinet carp: deal with negative net.inet.carp.demotion 2021-11-22 02:55:02 +01:00
netinet6 net: Allow binding of unspecified address without address existance 2021-11-18 19:28:56 -05:00
netipsec ipsec: enter epoch before calling into ipsec_run_hhooks 2021-10-11 09:10:31 +00:00
netpfil pf: Remove duplicate declaration of pf_ioctl_maxcount. 2021-11-22 02:53:33 +01:00
netsmb netsmb: Avoid a read-after-free in smb_t2_request_int() 2021-06-02 09:34:47 -04:00
nfs
nfsclient
nfsserver nfs: Mark unused statistics variable as reserved 2020-11-18 04:35:49 +00:00
nlm
ofed socket: Rename sb(un)lock() and interlock with listen(2) 2021-10-07 09:56:47 -04:00
opencrypto ktls: Fix assertion for TLS 1.0 CBC when using non-zero starting seqno. 2021-11-23 15:11:45 -08:00
powerpc powerpc64: fix OFWFB with Radix MMU 2021-11-05 11:08:27 -03:00
riscv Convert consumers to vm_page_alloc_noobj_contig() 2021-11-03 13:41:40 -04:00
rpc rpc: Convert an SOLISTENING check to an assertion 2021-09-24 09:01:07 -04:00
security mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit 2021-07-05 11:32:14 +00:00
sys ktls: Ensure FIFO encryption order for TLS 1.0. 2021-11-23 15:11:44 -08:00
teken loader: implement framebuffer console 2021-01-02 21:41:36 +02:00
tests routing: add IPv6 fib validation procedure. 2021-09-07 21:02:58 +00:00
tools makesyscalls.lua: add a CAPENABLED flag 2021-10-20 00:19:56 +01:00
ufs ffs_snapshot: do not assert that um_devvp is locked 2021-11-19 06:25:29 +02:00
vm vm_pager: Optimize an assertion 2021-11-22 08:44:08 -05:00
x86 Prefer CPUID leaf 1Fh for Intel CPU topology detection. 2021-11-19 19:26:29 -05:00
xdr
xen xen: remove .swp file from public headers 2021-01-11 18:14:11 +01:00
Makefile