Newer bugs come first
- Fix udp_output() lock inconsistency.
- Fix IPV6_CHECKSUM computation.
- When sending a routing message, don't allow the user to set the RTF_RNH_LOCKED flag in rtm_flags.
- Fix an SCTP related locking issue.
- Reinitialize multicast source filter structures after invalidation.
- Fix a small locking bug in tcp_log_id().
- Fix a double free of an SCTP association in an error path.
- Reject F_SETLK_REMOTE commands when sysid == 0.
- Initialize scheduler specific data for the FCFS scheduler.
- Improve locking when tearing down an SCTP association.
- Fix more signed unsigned issues in SCTP.
- Fix a signed/unsigned bug when receiving SCTP messages.
- Limit the size of messages sent on 1-to-many style SCTP sockets with the SCTP_SENDALL flag.
- Limit the number of bytes which can be queued for SCTP sockets.
- Fix a KASSERT() in tcp_output().
- Disallow preemptive creation of wired superpage mappings.
- vm_fault_copy_entry: accept invalid source pages.
- Fix a bug in the SCTP stream schedulers.
- Allocate an association id and register the stcb with holding the lock.
- Allow SCTP stream reconfiguration operations only in ESTABLISHED state.
- Fix handling of the SCTP_STATUS socket option in early states.
- Honor the memory limits provided when processing the SCTP_GET_LOCAL_ADDRESSES socket option.
- Check the index hasn't changed after writing the cmp entry.
- Improve input validation for raw IPv4 socket using the IP_HDRINCL option.
- Fix a locking issue in the IPPROTO_SCTP level SCTP_PEER_ADDR_THLDS socket.
- Fix a locking bug in the IPPROTO_SCTP level SCTP_EVENT socket option.
- Fix locking for IPPROTO_SCTP level SCTP_DEFAULT_PRINFO socket option.
- Fix an off-by-one error in the input validation of the SCTP_RESET_STREAMS socketoption.
- Limit the user-controllable amount of memory the kernel allocates via IPPROTO_SCTP level socket options.
- Fix getsockopt() for IP_OPTIONS/IP_RETOPTS.
- Avoid overfow in vtruncbuf().
- Limit option_len for the TCP_CCALGOOPT.
- Correct vm_fault_copy_entry() handling of backing file truncation after the file mapping was wired.
- In vm_fault_copy_entry(), we should not assert that entry is charged if the dst_object is not of swap type.
- Handle a guest executing a vm instruction by trapping and raising an undefined instruction exception.
- disallow clock_settime too far in the future to avoid panic.
- Fix parsing error when processing cmsg in SCTP send calls.