forked from kame/kame
/
CHANGELOG
633 lines (508 loc) · 25 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
CHANGELOG for KAME kit
$KAME: CHANGELOG,v 1.2839 2008/10/03 22:42:39 jinmei Exp $
<200810>
2008-10-03 JINMEI, Tatuya <jinmei@isc.org>
* kame/sys/netinet6/nd6_nbr.c (nd6_ns_input),
kame/sys/netinet6/nd6_rtr.c (nd6_rs_input):
added stricter validation on source address (for reference purpose
only).
<200705>
2007-05-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/icmp6.c: Disabled responding to NI queries
from a global address by default as specified in RFC4620.
It can be re-enabled by setting the 0x8 flag of
net.inet6.icmp6.nodeinfo.
2007-05-04 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/{nd6.c, nd6_nbr.c}: fixed a memory leak in
unresolved ND queue processing. (Reported by Hikaru Abe)
<200610>
2006-10-25 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/route6d/route6d.c (riprecv): implemented more
validation checks about incoming responses per RFC2080, and one
additional heuristic check for safer operation.
2006-10-25 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/rip6query/rip6query.c (main): added some new options
various options to customize the packet.
<200609>
2006-09-08 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c:
- stop updating MLDv1-compat-timer when an MLDv2 Query is received
in MLDv1-compat-mode (the 2006-09-06's commit is not enough)
2006-09-06 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c:
- stop updating MLDv1-compat-timer when an MLDv2 Query is received
in MLDv1-compat-mode (a bug due to a commit 2006-09-04)
* freebsd5/sys/net/if_loop.c:
let a loop-backed IPv6 packet go to lo0's BPF, while
software-emulated loopbacked ethernet frame still
goes to the physical I/F's BPF.
This closes the todo issue of the following item in
CHANGELOG.2000.
> Tue May 30 01:29:04 JST 2000 itojun@iijlab.net
...
> XXX if_simloop() call from ip6_output() causes junk to be injected
> to bpf buffer. we may need some fix separately from this commit.
(suggested by Max Laier)
2006-09-05 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet/in_msf.c, kame/sys/netinet6/in6_msf.c:
does not search MSF by 'fmode' in case of SIOCGMSFILTER or
SIOCGIPMSFILTER. (RFC3768 5.1.2 and 5.2.2)
(suggested by Yu-Jung Lee)
2006-09-04 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/{in6_msf.c, mldv2.c}: fixed several bugs regarding
MLDv2 (suggested by Yu-Jung Lee)
- returns an error code when the MSF state change fails due to a
lack of memory
- fixed a bug that an MLDv2 State-Change Report is not always
advertised robustness-variables times.
- MLDv1-compat-timer properly checks the current compat-timer
status
<200608>
2006-08-29 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet/icmp6.h: use ifdef for IGMPv3/MLDv2-related state
macros to prevent a macro duplication in userland applications.
(suggested by Hitoshi Asaeda)
<200607>
2006-07-11 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet/in_msf.c: fixed a bug that MSF advanced-API
is rejected in case of IPv4.
* kame/sys/netinet/igmp.c: fixed a kernel crash in freebsd5 when
MSF advanced-API is used in a kernel with IGMPV3 option on.
<200606>
2006-06-09 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/kame/shisad: RFC4285 on home agnets is implemented.
<200604>
2006-04-23 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/nd6.c (nd6_is_addr_neighbor): disabled the
on-link assumption from the determination logic.
2006-04-09 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/ip6_mroute.c (ip6_mrouter_done): used
if_allmulti(0) for diabling the multicast promiscuous mode for
FreeBSD. Without this change, an IPv6 multicast router would
leave interfaces in the promiscuous mode even after the routing
daemon terminates.
2006-04-02 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c: fixed a bug that an MLDv2 IS-IN Report
is not advertised for an MLDv2 general Query
<200603>
2006-03-28 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/ip6_output.c: fixed a kernel crash by an ASM
join from a userland application (KAME PR sys/932)
2006-03-27 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c: fixed several bugs regarding MLDv2-timer
2006-03-22 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/nd6.c: fixed a kernel crash due to a double-free
introduced in the below fix
2006-03-17 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/nd6.c: fixed a memory leak for an unresolved
packet in ND queue
2006-03-15 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/nd6_rtr.c: implements section 2.2. of
RFC4191, regarding the reserved preference value (10).
Fri Mar 3 20:20:37 JST 2006 keiichi@iijlab.net
* netbsd/sys/netinet6/in6_pcb.c: send an IPV6_PATHMTU ancillary
data when sending a packet whose size is larger than the path
mtu to the destination.
2005-03-03 SUZUKI, Shinsuke <suz@alaxala.net>
* removed the dhcpv6-related programs, since they are
now maintained/developed/released in wide-dhcpv6 project in sourceforge.net.
2006-03-03 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c (mld_state_change_report)
an update to the fix in Feb 11, 2006
<200602>
2006-02-24 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/icmp6.c (icmp6_redirect_input): fixed a bug
that a Redirect couldn't be processed correctly if the original
packet contained an extension header.
Pointed out by: Qing Li
2006-02-11 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c (mld_state_change_report)
fixed a bug that no MLDv2 report is advertised when host state changes
from IN/EX to EX/IN, respectively.
Reported by: Yu-Jung Lee
2006-02-01 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/kern/uipc_mbuf.c (m_pullup): fixed memory leak when
the original mbuf had an mtag and the pull-up operation required
allocating a new mbuf.
Reported by: Garfield Hsieh
<200601>
2006-01-15 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/{icmp6.c, in6.[ch]}: not reply an ICMPv6 Error
message for a packet from an obvious anycast address.
2006-01-09 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/netinet6/in6_pcb.c (in6_{set,peer}sockaddr):
converted embedded scope zone IDs into the sin6_scope_id field
appropriately.
Reported by: Susan.Lan
<200511>
2005-11-29 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/kame/shisad, kame/sys/netinet6/{mip6.c,nd6_nbr.c}:
Proxy DAD on a home agent is supported.
<200510>
2005-10-17 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/kame/rtadvd/config.c, rtadvd.[ch]: not reinitialize
the host-variables in kernel to the ones at the start-up time,
since RA is a stateless autoconfiguration protocol.
Suggested by: Hideaki YOSHIFUJI
2005-10-15 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c: fixed a MLDv2-kernel crash when
an inappropriate address is given to IPV6_JOIN_GROUP API
2005-10-15 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* raw_ip6.c (rip6_attach): caught failure of MALLOC for
icmp6_filter. The old code could dereference to a NULL pointer in
the failure case.
2005-10-08 SUZUKI, Shinsuke <suz@alaxala.net>
* removed the following multicast-related programs, since they are
now maintained/developed/released in mcast-tools project.
pim6sd (including mtrace6) pim6dd mfc mcastsend mcastread pmsft
<200509>
Tue Sep 20 14:09:07 JST 2005 keiichi@iijlab.net
*kame/{free|net}bsd/lib/libipsec
stop installing libipsec. The main user of the library was
racoon, but racoon is not distributed from the KAME kit
(instead, it is provided from ipsec-tools with libipsec). We
don't have a strong reason to install the library now.
also, the basic functions of the libipsec are already being
provided from the base distributions of FreeBSD and NetBSD.
2005-09-16 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/kame/dhcp6:
- support compilation on linux
- dhcp6relay can listen to multiple interfaces
- dhcp6s ignores the received DHCP message unless it comes from the
listening interface
Contributed by: Francis Dupont
2005-09-15 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/libinet6/getaddrinfo.c: removed IPPROTO_SCTP from the
explore array for SOCK_DGRAM, according to the usage described in
draft-ietf-tsvwg-sctpsocket-11.txt.
Also removed IPPROTO_DCCP entries altogether, since returning DCCP
addrinfo for SOCK_DGRAM has a bad effect on some existing UDP
applications. We'll need to revisit this once the DCCP API is
fixed.
This change fixes the problem that name resolution performed in
the KAME snap resolver has been failing on FreeBSD 5.4R.
2005-09-14 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/nd6_nbr.c (nd6_na_input): fixed incorrect
comparison introduced with cleanups on Aug 24th. This made NUD
unworkable, so all KAME snap kernels since then should be
upgraded.
<200508>
Thu Aug 25 14:21:44 JST 2005 keiichi@iijlab.net
* kame/sys/net/pfkeyv2.h,kame/sys/netinet6/ipsec.c,
kame/sys/netkey/key,c,key.h,key_debug.c
- added SADB_X_PACKET message type to deliver the information
of triggering packet of IKE negotiation when sending a
KEY_ACQUIRE message. This change should not cause any
binary compatibility issues, but if you found any, let us
know.
Great thanks to Francis Dupont for this extension.
2005-08-10 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ip6_mroute.c: fixed a kernel crash at the
start-up time of an IPv6 multicast program (pim6[sd]d, mfc)
2005-08-02 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet/igmp.c: fixed a kernel crash due to a
IN_MULTI locking failure. supports IN_MULTI locking in igmpv3
<200507>
2005-07-29 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/*:
- introduced a fine-grain-locking for interface-address list and
in_multi list.
- use malloc() with M_NOWAIT when joining a multicast group in layer2,
drivers. Error handling routine is also added when malloc() fails.
This is to prevent unnecessary locking failure. (e.g. nd-proxy)
Obtained from: freebsd-net
ToDo: support it on IGMPv3
2005-07-26 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/{in6_msf.c, in6_var.c, mldv2.c, ip6_output.c}:
ports some MLDv1 enhancements into MLDv2.
- use callout timer mechanism for protocol timer
- impose a random delay (when necessary) according to rfc2462bis
2005-07-26 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/route6d: route6d now does not care about the kernel
internal form for scoped addresses at all. In particular, it can
transparently specify the source of a RIPng response as a gateway
address through the routing socket.
2005-07-26 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* netbsd/openbsd: applied the same changes for routing sockets as
those for FreeBSD (see the next entry).
2005-07-23 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/net/rtsock.c: added support for IPv6 scoped
addresses for routing sockets:
- route_output() now accepts IPv6 addresses with non-0
sin6_scope_id field and converts those into the kernel internal
form.
- rt_msg[12]() recovers the embedded scope zone ID and set the
sin6_scope_id field appropriately.
* freebsd5/sbin/{ifconfig,route}: got rid of ugly (but still
incomplete) special cases for IPv6 link-local addresses thanks to
this change.
2005-07-22 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/fs/devfs/devfs_vnops.c:
FreeBSD Security Advisory FreeBSD-SA-05:17.devfs
2005-07-22 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6: fixed memory leak for renew/rebind event data.
(KAME PR 872 reported by Meng Huan Hsieh)
2005-07-22 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6_src.c: allowed an application to send a
packet to a scoped address without explicitly disambiguating the
scope zone but with specifying the outgoing interface. It's a bad
practice and should be discouraged, but such code has been spread,
unfortunately.
2005-07-16 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/ip6_output.c (ip6_output): do not send
ctlinput notification unconditionally when an outgoing packet is
larger than the link MTU. From FreeBSD.
2005-07-15 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ah_aesxcbcmac.c: fixed an
interoperability problem in AES-XCBC-MAC96.
(encryption was always done with the same key)
Submitted from: Yukiyo Akisada <akisada@64translator.com>
2005-07-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/pim6sd/{cfparse.y, cftoken.l, pim6sd.conf.5,
routesock.c, routesock.h}: implemented a static MRIB
for RPF calculation.
Wed Jul 13 20:26:31 JST 2005 keiichi@iijlab.net
* kame/kame/ndp/ndp.c
fixed the proxy directive to work properly.
2005-07-04 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet/ip_fw2.c
FreeBSD Security Advisory FreeBSD-SA-05:13.ipfw
* freebsd5/sys/netinet/{tcp_input.c, tcp_var.h}:
FreeBSD Security Advisory FreeBSD-SA-05:15.tcp
<200506>
2005-06-22 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/netinet6/in6_pcb.c (init_sin6): corrected argument
to sa6_recoverscope(). The previous code since June 17th's change
could modify invalid memory space (while the possibility should be
very rare) so upgrading is necessary.
2005-06-20 NISHIDA, Yoshifumi <nishida@csl.sony.co.jp>
* kame/sys/netinet/dccp.h kame/sys/netinet/dccp_tcplike.c
kame/sys/netinet/dccp_tcplike.h kame/sys/netinet/dccp_usrreq.c
kame/sys/netinet/dccp_var.h kame/sys/netinet6/dccp6_usrreq.c:
preliminary update to conform to the draft-ietf-dccp-spec-11.txt
2005-06-20 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/sys/netinet6/nd6.c: Units of comparison to determine default
router expiration are mismateched. This problem was reported and
modified by Alan Chang <ccchang@zyxel.com.tw>.
2005-06-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6_ifattach.c (in6_ifattach): do not
auto-configure link-local addresses on loopback or PPP interfaces.
The latter is based on a comment from Francis Dupont.
2005-06-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/nd6.c (nd6_need_cache): perform NUD on PPP
interfaces.
2005-06-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* {kame,*bsd}/sys/(various files): revised scope-related
interfaces, clarifying the relationship between the
kernel-internal form and the public sockaddr_in6 form. Details
are described in kame/IMPLEMENTATION. External behavior basically
should not change, although several bugs in minor cases were also
fixed with the clarification. Some scope-related functions were
deprecated.
2005-06-08 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/nd6.c: fixed a bug that some of the subcommands
in 'ndp -i ..' command does not work (e.g. accept_rtadv, nud)
2005-06-06 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet6/mldv2.c: send a Multicast-Listener-Done
message when stop listening to a group.
(this fix is necessary if MLDv2 is enabled in kernel and
net.inet6.icmp6.mld_version is set to 1)
<200505>
Wed May 25 12:20:25 JST 2005 keiichi@iijlab.net
* kame/kame/shisa: now shisa daemons uses configuration files
instead of command line options. please check sample
configuratoin files located in the shisa directory.
2005-05-21 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6.c (in6_if2idlen): supported IFT_PPP.
2005-05-19 SUZUKI, Shinsuke <suz@kame.net>
* (freebsd5|netbsd)/sys/sys/sockio.h: assign the same ioctl number
to MSF-API-related ioctls among all *BSDs (to keep binary
compatibilities as much as possible)
2005-05-14 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/libinet6/getaddrinfo.c (matchlen): corrected a wrong
cast from sockaddr_in to sockaddr_in6.
2005-05-13 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5: sync with 5.4-RELEASE (it includes a fix for
the FreeBSD Security Advisory FreeBSD-SA-05:06-09)
2005-05-03 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/dhcp6c_ia.c (ia_timo): kept the latest server's
DUID even in the REBIND state in case of sending a Release message
in that state.
2005-05-03 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/cfparse.y: corrected "address parameters" so
that we don't have to specify the meaningless (but mandatory)
prefix length in the context of IA_NA.
2005-05-03 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/config.c (configure_commit): made sure that
interface parameters are initialized with the default values even
if the interface is not explicitly configured in the configuration
file. This particularly made sure that the preference option is
not included unless explicitly specified. A memory leakage for
the client when specifying a script file was also fixed.
<200504>
2005-04-29 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/dhcp6c.c (client6_mainloop): corrected error
handling for select(2) in order to avoid unexpected blocking when
receiving a signal.
Thu Apr 28 16:12:38 JST 2005 sakane@tanu.org
* freebsd[45]/usr.sbin/Makefile,netbsd/usr.sbin/Makefile:
racoon was removed from the make list.
2005-04-28 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sbin/ip6fw: stop including ip6fw in SNAP, since FreeBSD's
ip6fw is enough (KAME's ip6fw does not have any function different
from ip6fw)
2005-04-27 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6.c (in6_update_ifa): always updated
ia6_updatetime regardless of whether the address is created or
updated. This is necessary so that the expiration times will be
updated correctly when the lifetiems of an existing address are
modified by hand or by a process such as a DHCPv6 client.
2005-04-26 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/addrconf.c (na_ifaddrconf): corrected lifetime
arguments to ifaddrconf().
2005-04-23 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/in6_rmx.c, in6_ifattach.c: fixed a kernel crash
by a lock-order-reversal in freebsd5
2005-04-20 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/net/if.c: FreeBSD Security Advisory
FreeBSD-SA-05:04.ifconf
2005-04-19 SUZUKI, Shinsuke <suz@kame.net>
* *bsd/sys/netinet/igmp.c, igmp_var.h, in.[ch], ip_output.c,
kame/sys/netient/in_msf.c:
IGMPv3 treats 224.0.0.x(x!=1) as a normal IPv4 multicast address,
as specified in RFC3766.
* openbsd/sys/netinet/in.c, in_var.h, ip_output.c,
* netbsd/sys/netinet/igmp.c, igmp_var.h, in.c, in_pcb.c, in_var.h,
ip_output.c: reflect the following MLDv2 changes into the
NetBSD/OpenBSD's IGMPv3 implementation.
- fixs a kernel crash by an IGMPv3 Query (2005-01-01)
- retransmits IGMPv3 report RobustnessVariable times (2004-12-31)
- corrects an IGMP-query handling when MaxResponseCode=0 (2004-12-27)
- introduces a sysctl option to force IGMP version (2004-07-09)
- renames IGMPv3-ready in_multi{} manipulation functions (2004-02-05)
* freebsd5/sys/netinet/igmp.c: fixed a kernel crash by an IGMP packet
(a bug introduced in the change at 2005-04-14)
2005-04-18 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet/igmp.c, in.c, ip_output.c,
kame/sys/netinet/in_msf.c: fixed the byte order of an IPv4 address
for IN_XXX macros (freebsd-only)
2005-04-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet/in_msf.c freebsd5/contrib/pf/net/if_pfsync.c,
freebsd5/sys/netinet/igmp.c, igmp_var.h, in.c, in_pcb.c, in_var.h,
ip_output.c: reflect the following MLDv2 changes into the FreeBSD5's
IGMPv3 implementation.
- fixs a kernel crash by an IGMPv3 Query (2005-01-01)
- retransmits IGMPv3 report RobustnessVariable times (2004-12-31)
- corrects an IGMP-query handling when MaxResponseCode=0 (2004-12-27)
- introduces a sysctl option to force IGMP version (2004-07-09)
- renames IGMPv3-ready in_multi{} manipulation functions (2004-02-05)
* freebsd5/sys/netinet/ip_output.c: specifies spl()s as done in
original FreeBSD5
* kame/*: remove freebsd[234]-specific code, since they are no longer
supported in KAME-SNAP
2005-04-05 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/ufs/ffs/ffs_inode.c: FreeBSD Security Advisory
FreeBSD-SA-05:02.sendfile
2005-04-04 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/nd6.c: when the number of the packets queued in
a NDP cache exceed the limit, discard the oldest packet,
as specified in RFC2461 7.2.2.
2005-04-01 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet/icmp6.h, kame/sys/netinet6/icmp6.c, nd6.c: limits
the number of unresolved packets stored in a NDP cache.
(To prevent a DoS attack using 2005-01-21's change)
2005-04-01 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/rtadvd/config.c, rtadvd.[ch]: reflect router-variables
in RA configuration into host-variables in kernel.
<200503>
2005-03-30 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/addrconf.c (update_address): make sure that
the lifetimes of addresses are updated when the client receives a
Reply in response to Renew or Rebind.
2005-03-23 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/net/if_ist.c: added a sanity check for the IPv4 address
embedded in the configured IPv6 address
2005-03-18 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/in6.c, in6_var.h, in6_proto.c, ip6_input.c,
ip6_mroute.c: added a knob to enable path MTU discovery for
multicast packets. (by default, it is disabled)
2005-03-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ip6_output.c: fixed a kernel crash due to a LOR
by a multicast-group join without specifying any receiving interface.
2005-03-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/in6.c, in6_var.h, nd6.c: introduced an ioctl option
to configure IPv6 host variables from userland. (intented for a use
on router to reflect RA parameter to kernel)
* kame/kame/ndp/ndp.c: added a knob to kick this ioctl.
2005-03-08 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/kern/uipc_socket.c, freebsd5/sys/kern/uipc_syscalls.c,
freebsd5/kern/socket.h
makes SCTP compilable on FreeBSD5
Tue Mar 8 05:31:52 JST 2005
* kame/kame/racoon/isakmp.c:
one of buffer overrun problem was fixed. from ipsec-tools team.
Mon Mar 6 2005 itojun@iijlab.net
* kame/sys/netinet{,6}/sctp*: new patch from randall
2005-03-02 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/dhcp6/dhcp6.c: fixed a DHCPv6-client
initialization failure when a node has no IPv6 global address.
2005-03-02 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/dhcp6/dhcp6relay.[c8]: supports multiple client-side
interfaces
2005-03-02 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ip6_output.c: fixed a freebsd5 kernel crash when
WITNESS debug option is enabled
2005-03-01 ryuji <ryuji@sfc.wide.ad.jp>
* "mdd" is replaced by "babymdd". please see man page for details.
2005-03-01 SUZUKI, Shinsuke <suz@kame.net>
* integrated dhcp6lc functionality into dhcp6c ('i' option)
<200502>
2005-02-28 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/sys/net/mipsock.c, kame/kame/shisad/mnd.c: Fixed word alignment
problems.
2005-02-22 SUZUKI, Shinsuke <suz@crl.hitachi.co.jp>
* kame/sys/net/pf.c, freebsd5/sys/contrib/pf/net/pf.c: fixed a bug that
PF discards every packet with option headers.
Reported by: Stig Venaas
2005-02-22 SUZUKI, Shinsuke <suz@crl.hitachi.co.jp>
* kame/sys/netinet6/ip6_input.c: fixed PF malfunction for inbound
IPv6 traffic on freebsd5.
2005-02-15 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/ipsec.c: (ipsec[46]_in_reject): fixed
unexpected panic on freebsd5.
Mon Feb 7 12:02:16 JST 2005 keiichi@iijlab.net
* freebsd4: Upgrade to 4.11-RELEASE
<200501>
2005-01-31 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/sys/netinet6/mip6.c: stop proxy ND on a home agent when
the home agent daemon was terminated.
This problem was found by Christian Vogt<chvogt@tm.uka.de>.
2005-01-23 suz@crl.hitachi.co.jp
* kame/sys/netinet6/nd6.h: fixed an IPv6 packet output failure
when an ICMPv6 Redirect message announces that the destination
is onlink in prior to the packet output.
2005-01-21 suz@crl.hitachi.co.jp
* kame/sys/netinet6/{nd6.c, nd6_nbr.c}: fixed a loss of fragmented
packets when the corresponding NDP state is not resolved.
2005-01-17 suz@crl.hitachi.co.jp
* kame/sys/netinet6/icmp6.c: ignores ICMPv6 code field in case of
ICMPv6 Packet-Too-Big.
2005-01-15 suz@crl.hitachi.co.jp
* kame/sys/netinet6/ip6_output: fixed a path MTU discovery failure
on FreeBSD5.
2005-01-15 suz@crl.hitachi.co.jp
* kame/sys/netinet6/icmp6.c: fixed an ICMPv6 Redirect message corruption
2005-01-12 suz@crl.hitachi.co.jp
* kame/kame/dhcp6: implemented stateful non-temporary address
assignment.
2005-01-10 suz@crl.hitachi.co.jp
* kame/sys/netkey/key.c: fixed an unexpected addr/port matching failure
in SA management.
2005-01-07 suz@crl.hitachi.co.jp
* kame/sys/netinet6/{udp6_var.h, udp6_usrreq.c}: fixed a NetBSD
kernel crash by referring to an uninitialized variable.
Wed Jan 5 07:58:00 UTC 2005 itojun@iijlab.net
* switch NetBSD base version to 2.0. todo: dccp, sctp, pf, altq
2005-01-01 suz@crl.hitachi.co.jp
* kame/sys/netinet6/mldv2.c: fixed a kernel crash by an MLDv2
Query (Multicast Address and Source Specific Query).