Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
branch: master
Fetching contributors…

Cannot retrieve contributors at this time

file 633 lines (508 sloc) 25.63 kb
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633
CHANGELOG for KAME kit
$KAME: CHANGELOG,v 1.2839 2008/10/03 22:42:39 jinmei Exp $

<200810>
2008-10-03 JINMEI, Tatuya <jinmei@isc.org>
* kame/sys/netinet6/nd6_nbr.c (nd6_ns_input),
kame/sys/netinet6/nd6_rtr.c (nd6_rs_input):
added stricter validation on source address (for reference purpose
only).

<200705>
2007-05-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/icmp6.c: Disabled responding to NI queries
from a global address by default as specified in RFC4620.
It can be re-enabled by setting the 0x8 flag of
net.inet6.icmp6.nodeinfo.

2007-05-04 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/{nd6.c, nd6_nbr.c}: fixed a memory leak in
unresolved ND queue processing. (Reported by Hikaru Abe)

<200610>
2006-10-25 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/route6d/route6d.c (riprecv): implemented more
validation checks about incoming responses per RFC2080, and one
additional heuristic check for safer operation.

2006-10-25 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/rip6query/rip6query.c (main): added some new options
various options to customize the packet.

<200609>
2006-09-08 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c:
- stop updating MLDv1-compat-timer when an MLDv2 Query is received
in MLDv1-compat-mode (the 2006-09-06's commit is not enough)

2006-09-06 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c:
- stop updating MLDv1-compat-timer when an MLDv2 Query is received
in MLDv1-compat-mode (a bug due to a commit 2006-09-04)

* freebsd5/sys/net/if_loop.c:
let a loop-backed IPv6 packet go to lo0's BPF, while
software-emulated loopbacked ethernet frame still
goes to the physical I/F's BPF.

This closes the todo issue of the following item in
CHANGELOG.2000.

> Tue May 30 01:29:04 JST 2000 itojun@iijlab.net
...
> XXX if_simloop() call from ip6_output() causes junk to be injected
> to bpf buffer. we may need some fix separately from this commit.

(suggested by Max Laier)

2006-09-05 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet/in_msf.c, kame/sys/netinet6/in6_msf.c:
does not search MSF by 'fmode' in case of SIOCGMSFILTER or
SIOCGIPMSFILTER. (RFC3768 5.1.2 and 5.2.2)
(suggested by Yu-Jung Lee)

2006-09-04 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/{in6_msf.c, mldv2.c}: fixed several bugs regarding
MLDv2 (suggested by Yu-Jung Lee)
- returns an error code when the MSF state change fails due to a
lack of memory
- fixed a bug that an MLDv2 State-Change Report is not always
advertised robustness-variables times.
- MLDv1-compat-timer properly checks the current compat-timer
status

<200608>
2006-08-29 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet/icmp6.h: use ifdef for IGMPv3/MLDv2-related state
macros to prevent a macro duplication in userland applications.
(suggested by Hitoshi Asaeda)

<200607>
2006-07-11 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet/in_msf.c: fixed a bug that MSF advanced-API
is rejected in case of IPv4.
* kame/sys/netinet/igmp.c: fixed a kernel crash in freebsd5 when
MSF advanced-API is used in a kernel with IGMPV3 option on.

<200606>
2006-06-09 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/kame/shisad: RFC4285 on home agnets is implemented.

<200604>
2006-04-23 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/nd6.c (nd6_is_addr_neighbor): disabled the
on-link assumption from the determination logic.

2006-04-09 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/ip6_mroute.c (ip6_mrouter_done): used
if_allmulti(0) for diabling the multicast promiscuous mode for
FreeBSD. Without this change, an IPv6 multicast router would
leave interfaces in the promiscuous mode even after the routing
daemon terminates.

2006-04-02 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c: fixed a bug that an MLDv2 IS-IN Report
is not advertised for an MLDv2 general Query

<200603>
2006-03-28 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/ip6_output.c: fixed a kernel crash by an ASM
join from a userland application (KAME PR sys/932)

2006-03-27 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c: fixed several bugs regarding MLDv2-timer

2006-03-22 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/nd6.c: fixed a kernel crash due to a double-free
introduced in the below fix

2006-03-17 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/nd6.c: fixed a memory leak for an unresolved
packet in ND queue

2006-03-15 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/nd6_rtr.c: implements section 2.2. of
RFC4191, regarding the reserved preference value (10).

Fri Mar 3 20:20:37 JST 2006 keiichi@iijlab.net
* netbsd/sys/netinet6/in6_pcb.c: send an IPV6_PATHMTU ancillary
data when sending a packet whose size is larger than the path
mtu to the destination.

2005-03-03 SUZUKI, Shinsuke <suz@alaxala.net>
* removed the dhcpv6-related programs, since they are
now maintained/developed/released in wide-dhcpv6 project in sourceforge.net.

2006-03-03 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c (mld_state_change_report)
an update to the fix in Feb 11, 2006

<200602>
2006-02-24 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/icmp6.c (icmp6_redirect_input): fixed a bug
that a Redirect couldn't be processed correctly if the original
packet contained an extension header.
Pointed out by: Qing Li

2006-02-11 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c (mld_state_change_report)
fixed a bug that no MLDv2 report is advertised when host state changes
from IN/EX to EX/IN, respectively.
Reported by: Yu-Jung Lee

2006-02-01 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/kern/uipc_mbuf.c (m_pullup): fixed memory leak when
the original mbuf had an mtag and the pull-up operation required
allocating a new mbuf.
Reported by: Garfield Hsieh

<200601>
2006-01-15 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/{icmp6.c, in6.[ch]}: not reply an ICMPv6 Error
message for a packet from an obvious anycast address.

2006-01-09 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/netinet6/in6_pcb.c (in6_{set,peer}sockaddr):
converted embedded scope zone IDs into the sin6_scope_id field
appropriately.
Reported by: Susan.Lan

<200511>
2005-11-29 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/kame/shisad, kame/sys/netinet6/{mip6.c,nd6_nbr.c}:
Proxy DAD on a home agent is supported.

<200510>
2005-10-17 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/kame/rtadvd/config.c, rtadvd.[ch]: not reinitialize
the host-variables in kernel to the ones at the start-up time,
since RA is a stateless autoconfiguration protocol.
Suggested by: Hideaki YOSHIFUJI

2005-10-15 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/sys/netinet6/mldv2.c: fixed a MLDv2-kernel crash when
an inappropriate address is given to IPV6_JOIN_GROUP API

2005-10-15 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* raw_ip6.c (rip6_attach): caught failure of MALLOC for
icmp6_filter. The old code could dereference to a NULL pointer in
the failure case.

2005-10-08 SUZUKI, Shinsuke <suz@alaxala.net>
* removed the following multicast-related programs, since they are
now maintained/developed/released in mcast-tools project.
pim6sd (including mtrace6) pim6dd mfc mcastsend mcastread pmsft

<200509>
Tue Sep 20 14:09:07 JST 2005 keiichi@iijlab.net
*kame/{free|net}bsd/lib/libipsec
stop installing libipsec. The main user of the library was
racoon, but racoon is not distributed from the KAME kit
(instead, it is provided from ipsec-tools with libipsec). We
don't have a strong reason to install the library now.

also, the basic functions of the libipsec are already being
provided from the base distributions of FreeBSD and NetBSD.

2005-09-16 SUZUKI, Shinsuke <suz@alaxala.net>
* kame/kame/dhcp6:
- support compilation on linux
- dhcp6relay can listen to multiple interfaces
- dhcp6s ignores the received DHCP message unless it comes from the
listening interface
Contributed by: Francis Dupont

2005-09-15 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/libinet6/getaddrinfo.c: removed IPPROTO_SCTP from the
explore array for SOCK_DGRAM, according to the usage described in
draft-ietf-tsvwg-sctpsocket-11.txt.
Also removed IPPROTO_DCCP entries altogether, since returning DCCP
addrinfo for SOCK_DGRAM has a bad effect on some existing UDP
applications. We'll need to revisit this once the DCCP API is
fixed.

This change fixes the problem that name resolution performed in
the KAME snap resolver has been failing on FreeBSD 5.4R.

2005-09-14 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/nd6_nbr.c (nd6_na_input): fixed incorrect
comparison introduced with cleanups on Aug 24th. This made NUD
unworkable, so all KAME snap kernels since then should be
upgraded.

<200508>
Thu Aug 25 14:21:44 JST 2005 keiichi@iijlab.net
* kame/sys/net/pfkeyv2.h,kame/sys/netinet6/ipsec.c,
kame/sys/netkey/key,c,key.h,key_debug.c
- added SADB_X_PACKET message type to deliver the information
of triggering packet of IKE negotiation when sending a
KEY_ACQUIRE message. This change should not cause any
binary compatibility issues, but if you found any, let us
know.

Great thanks to Francis Dupont for this extension.

2005-08-10 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ip6_mroute.c: fixed a kernel crash at the
start-up time of an IPv6 multicast program (pim6[sd]d, mfc)

2005-08-02 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet/igmp.c: fixed a kernel crash due to a
IN_MULTI locking failure. supports IN_MULTI locking in igmpv3

<200507>
2005-07-29 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/*:
- introduced a fine-grain-locking for interface-address list and
in_multi list.
- use malloc() with M_NOWAIT when joining a multicast group in layer2,
drivers. Error handling routine is also added when malloc() fails.
This is to prevent unnecessary locking failure. (e.g. nd-proxy)
Obtained from: freebsd-net
ToDo: support it on IGMPv3

2005-07-26 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/{in6_msf.c, in6_var.c, mldv2.c, ip6_output.c}:
ports some MLDv1 enhancements into MLDv2.
- use callout timer mechanism for protocol timer
- impose a random delay (when necessary) according to rfc2462bis

2005-07-26 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/route6d: route6d now does not care about the kernel
internal form for scoped addresses at all. In particular, it can
transparently specify the source of a RIPng response as a gateway
address through the routing socket.

2005-07-26 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* netbsd/openbsd: applied the same changes for routing sockets as
those for FreeBSD (see the next entry).

2005-07-23 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/net/rtsock.c: added support for IPv6 scoped
addresses for routing sockets:
- route_output() now accepts IPv6 addresses with non-0
sin6_scope_id field and converts those into the kernel internal
form.
- rt_msg[12]() recovers the embedded scope zone ID and set the
sin6_scope_id field appropriately.
* freebsd5/sbin/{ifconfig,route}: got rid of ugly (but still
incomplete) special cases for IPv6 link-local addresses thanks to
this change.

2005-07-22 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/fs/devfs/devfs_vnops.c:
FreeBSD Security Advisory FreeBSD-SA-05:17.devfs

2005-07-22 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6: fixed memory leak for renew/rebind event data.
(KAME PR 872 reported by Meng Huan Hsieh)

2005-07-22 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6_src.c: allowed an application to send a
packet to a scoped address without explicitly disambiguating the
scope zone but with specifying the outgoing interface. It's a bad
practice and should be discouraged, but such code has been spread,
unfortunately.

2005-07-16 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/ip6_output.c (ip6_output): do not send
ctlinput notification unconditionally when an outgoing packet is
larger than the link MTU. From FreeBSD.

2005-07-15 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ah_aesxcbcmac.c: fixed an
interoperability problem in AES-XCBC-MAC96.
(encryption was always done with the same key)

Submitted from: Yukiyo Akisada <akisada@64translator.com>

2005-07-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/pim6sd/{cfparse.y, cftoken.l, pim6sd.conf.5,
routesock.c, routesock.h}: implemented a static MRIB
for RPF calculation.

Wed Jul 13 20:26:31 JST 2005 keiichi@iijlab.net
* kame/kame/ndp/ndp.c
fixed the proxy directive to work properly.

2005-07-04 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet/ip_fw2.c
FreeBSD Security Advisory FreeBSD-SA-05:13.ipfw
* freebsd5/sys/netinet/{tcp_input.c, tcp_var.h}:
FreeBSD Security Advisory FreeBSD-SA-05:15.tcp

<200506>
2005-06-22 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* freebsd5/sys/netinet6/in6_pcb.c (init_sin6): corrected argument
to sa6_recoverscope(). The previous code since June 17th's change
could modify invalid memory space (while the possibility should be
very rare) so upgrading is necessary.

2005-06-20 NISHIDA, Yoshifumi <nishida@csl.sony.co.jp>
    * kame/sys/netinet/dccp.h kame/sys/netinet/dccp_tcplike.c
      kame/sys/netinet/dccp_tcplike.h kame/sys/netinet/dccp_usrreq.c
      kame/sys/netinet/dccp_var.h kame/sys/netinet6/dccp6_usrreq.c:
preliminary update to conform to the draft-ietf-dccp-spec-11.txt

2005-06-20 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/sys/netinet6/nd6.c: Units of comparison to determine default
router expiration are mismateched. This problem was reported and
modified by Alan Chang <ccchang@zyxel.com.tw>.

2005-06-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6_ifattach.c (in6_ifattach): do not
auto-configure link-local addresses on loopback or PPP interfaces.
The latter is based on a comment from Francis Dupont.

2005-06-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/nd6.c (nd6_need_cache): perform NUD on PPP
interfaces.

2005-06-17 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* {kame,*bsd}/sys/(various files): revised scope-related
interfaces, clarifying the relationship between the
kernel-internal form and the public sockaddr_in6 form. Details
are described in kame/IMPLEMENTATION. External behavior basically
should not change, although several bugs in minor cases were also
fixed with the clarification. Some scope-related functions were
deprecated.

2005-06-08 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/nd6.c: fixed a bug that some of the subcommands
in 'ndp -i ..' command does not work (e.g. accept_rtadv, nud)

2005-06-06 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet6/mldv2.c: send a Multicast-Listener-Done
message when stop listening to a group.
(this fix is necessary if MLDv2 is enabled in kernel and
net.inet6.icmp6.mld_version is set to 1)

<200505>
Wed May 25 12:20:25 JST 2005 keiichi@iijlab.net
* kame/kame/shisa: now shisa daemons uses configuration files
instead of command line options. please check sample
configuratoin files located in the shisa directory.

2005-05-21 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6.c (in6_if2idlen): supported IFT_PPP.

2005-05-19 SUZUKI, Shinsuke <suz@kame.net>
* (freebsd5|netbsd)/sys/sys/sockio.h: assign the same ioctl number
to MSF-API-related ioctls among all *BSDs (to keep binary
compatibilities as much as possible)

2005-05-14 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/libinet6/getaddrinfo.c (matchlen): corrected a wrong
cast from sockaddr_in to sockaddr_in6.

2005-05-13 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5: sync with 5.4-RELEASE (it includes a fix for
the FreeBSD Security Advisory FreeBSD-SA-05:06-09)

2005-05-03 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/dhcp6c_ia.c (ia_timo): kept the latest server's
DUID even in the REBIND state in case of sending a Release message
in that state.

2005-05-03 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/cfparse.y: corrected "address parameters" so
that we don't have to specify the meaningless (but mandatory)
prefix length in the context of IA_NA.

2005-05-03 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/config.c (configure_commit): made sure that
interface parameters are initialized with the default values even
if the interface is not explicitly configured in the configuration
file. This particularly made sure that the preference option is
not included unless explicitly specified. A memory leakage for
the client when specifying a script file was also fixed.

<200504>
2005-04-29 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/dhcp6c.c (client6_mainloop): corrected error
handling for select(2) in order to avoid unexpected blocking when
receiving a signal.

Thu Apr 28 16:12:38 JST 2005 sakane@tanu.org
* freebsd[45]/usr.sbin/Makefile,netbsd/usr.sbin/Makefile:
racoon was removed from the make list.

2005-04-28 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sbin/ip6fw: stop including ip6fw in SNAP, since FreeBSD's
ip6fw is enough (KAME's ip6fw does not have any function different
from ip6fw)

2005-04-27 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/in6.c (in6_update_ifa): always updated
ia6_updatetime regardless of whether the address is created or
updated. This is necessary so that the expiration times will be
updated correctly when the lifetiems of an existing address are
modified by hand or by a process such as a DHCPv6 client.

2005-04-26 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/addrconf.c (na_ifaddrconf): corrected lifetime
arguments to ifaddrconf().

2005-04-23 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/in6_rmx.c, in6_ifattach.c: fixed a kernel crash
by a lock-order-reversal in freebsd5

2005-04-20 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/net/if.c: FreeBSD Security Advisory
FreeBSD-SA-05:04.ifconf

2005-04-19 SUZUKI, Shinsuke <suz@kame.net>
* *bsd/sys/netinet/igmp.c, igmp_var.h, in.[ch], ip_output.c,
kame/sys/netient/in_msf.c:
IGMPv3 treats 224.0.0.x(x!=1) as a normal IPv4 multicast address,
as specified in RFC3766.

* openbsd/sys/netinet/in.c, in_var.h, ip_output.c,
* netbsd/sys/netinet/igmp.c, igmp_var.h, in.c, in_pcb.c, in_var.h,
ip_output.c: reflect the following MLDv2 changes into the
NetBSD/OpenBSD's IGMPv3 implementation.
- fixs a kernel crash by an IGMPv3 Query (2005-01-01)
- retransmits IGMPv3 report RobustnessVariable times (2004-12-31)
- corrects an IGMP-query handling when MaxResponseCode=0 (2004-12-27)
- introduces a sysctl option to force IGMP version (2004-07-09)
- renames IGMPv3-ready in_multi{} manipulation functions (2004-02-05)

* freebsd5/sys/netinet/igmp.c: fixed a kernel crash by an IGMP packet
(a bug introduced in the change at 2005-04-14)

2005-04-18 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/netinet/igmp.c, in.c, ip_output.c,
kame/sys/netinet/in_msf.c: fixed the byte order of an IPv4 address
for IN_XXX macros (freebsd-only)

2005-04-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet/in_msf.c freebsd5/contrib/pf/net/if_pfsync.c,
freebsd5/sys/netinet/igmp.c, igmp_var.h, in.c, in_pcb.c, in_var.h,
ip_output.c: reflect the following MLDv2 changes into the FreeBSD5's
IGMPv3 implementation.
- fixs a kernel crash by an IGMPv3 Query (2005-01-01)
- retransmits IGMPv3 report RobustnessVariable times (2004-12-31)
- corrects an IGMP-query handling when MaxResponseCode=0 (2004-12-27)
- introduces a sysctl option to force IGMP version (2004-07-09)
- renames IGMPv3-ready in_multi{} manipulation functions (2004-02-05)

* freebsd5/sys/netinet/ip_output.c: specifies spl()s as done in
original FreeBSD5

* kame/*: remove freebsd[234]-specific code, since they are no longer
supported in KAME-SNAP

2005-04-05 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/ufs/ffs/ffs_inode.c: FreeBSD Security Advisory
FreeBSD-SA-05:02.sendfile

2005-04-04 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/nd6.c: when the number of the packets queued in
a NDP cache exceed the limit, discard the oldest packet,
as specified in RFC2461 7.2.2.

2005-04-01 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet/icmp6.h, kame/sys/netinet6/icmp6.c, nd6.c: limits
the number of unresolved packets stored in a NDP cache.
(To prevent a DoS attack using 2005-01-21's change)

2005-04-01 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/rtadvd/config.c, rtadvd.[ch]: reflect router-variables
in RA configuration into host-variables in kernel.

<200503>
2005-03-30 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/kame/dhcp6/addrconf.c (update_address): make sure that
the lifetimes of addresses are updated when the client receives a
Reply in response to Renew or Rebind.

2005-03-23 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/net/if_ist.c: added a sanity check for the IPv4 address
embedded in the configured IPv6 address

2005-03-18 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/in6.c, in6_var.h, in6_proto.c, ip6_input.c,
ip6_mroute.c: added a knob to enable path MTU discovery for
multicast packets. (by default, it is disabled)

2005-03-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ip6_output.c: fixed a kernel crash due to a LOR
by a multicast-group join without specifying any receiving interface.

2005-03-14 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/in6.c, in6_var.h, nd6.c: introduced an ioctl option
to configure IPv6 host variables from userland. (intented for a use
on router to reflect RA parameter to kernel)
* kame/kame/ndp/ndp.c: added a knob to kick this ioctl.

2005-03-08 SUZUKI, Shinsuke <suz@kame.net>
* freebsd5/sys/kern/uipc_socket.c, freebsd5/sys/kern/uipc_syscalls.c,
freebsd5/kern/socket.h
makes SCTP compilable on FreeBSD5

Tue Mar 8 05:31:52 JST 2005
* kame/kame/racoon/isakmp.c:
one of buffer overrun problem was fixed. from ipsec-tools team.

Mon Mar 6 2005 itojun@iijlab.net
* kame/sys/netinet{,6}/sctp*: new patch from randall

2005-03-02 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/dhcp6/dhcp6.c: fixed a DHCPv6-client
initialization failure when a node has no IPv6 global address.

2005-03-02 SUZUKI, Shinsuke <suz@kame.net>
* kame/kame/dhcp6/dhcp6relay.[c8]: supports multiple client-side
interfaces

2005-03-02 SUZUKI, Shinsuke <suz@kame.net>
* kame/sys/netinet6/ip6_output.c: fixed a freebsd5 kernel crash when
WITNESS debug option is enabled

2005-03-01 ryuji <ryuji@sfc.wide.ad.jp>
* "mdd" is replaced by "babymdd". please see man page for details.

2005-03-01 SUZUKI, Shinsuke <suz@kame.net>
* integrated dhcp6lc functionality into dhcp6c ('i' option)

<200502>
2005-02-28 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/sys/net/mipsock.c, kame/kame/shisad/mnd.c: Fixed word alignment
problems.

2005-02-22 SUZUKI, Shinsuke <suz@crl.hitachi.co.jp>
* kame/sys/net/pf.c, freebsd5/sys/contrib/pf/net/pf.c: fixed a bug that
PF discards every packet with option headers.

Reported by: Stig Venaas

2005-02-22 SUZUKI, Shinsuke <suz@crl.hitachi.co.jp>
* kame/sys/netinet6/ip6_input.c: fixed PF malfunction for inbound
IPv6 traffic on freebsd5.

2005-02-15 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>
* kame/sys/netinet6/ipsec.c: (ipsec[46]_in_reject): fixed
unexpected panic on freebsd5.

Mon Feb 7 12:02:16 JST 2005 keiichi@iijlab.net
* freebsd4: Upgrade to 4.11-RELEASE

<200501>
2005-01-31 Tsuyoshi MOMOSE <momose@az.jp.nec.com>
* kame/sys/netinet6/mip6.c: stop proxy ND on a home agent when
the home agent daemon was terminated.
This problem was found by Christian Vogt<chvogt@tm.uka.de>.

2005-01-23 suz@crl.hitachi.co.jp
* kame/sys/netinet6/nd6.h: fixed an IPv6 packet output failure
when an ICMPv6 Redirect message announces that the destination
is onlink in prior to the packet output.

2005-01-21 suz@crl.hitachi.co.jp
* kame/sys/netinet6/{nd6.c, nd6_nbr.c}: fixed a loss of fragmented
packets when the corresponding NDP state is not resolved.

2005-01-17 suz@crl.hitachi.co.jp
* kame/sys/netinet6/icmp6.c: ignores ICMPv6 code field in case of
ICMPv6 Packet-Too-Big.

2005-01-15 suz@crl.hitachi.co.jp
* kame/sys/netinet6/ip6_output: fixed a path MTU discovery failure
on FreeBSD5.

2005-01-15 suz@crl.hitachi.co.jp
* kame/sys/netinet6/icmp6.c: fixed an ICMPv6 Redirect message corruption

2005-01-12 suz@crl.hitachi.co.jp
* kame/kame/dhcp6: implemented stateful non-temporary address
assignment.

2005-01-10 suz@crl.hitachi.co.jp
* kame/sys/netkey/key.c: fixed an unexpected addr/port matching failure
in SA management.

2005-01-07 suz@crl.hitachi.co.jp
* kame/sys/netinet6/{udp6_var.h, udp6_usrreq.c}: fixed a NetBSD
kernel crash by referring to an uninitialized variable.

Wed Jan 5 07:58:00 UTC 2005 itojun@iijlab.net
* switch NetBSD base version to 2.0. todo: dccp, sctp, pf, altq

2005-01-01 suz@crl.hitachi.co.jp
* kame/sys/netinet6/mldv2.c: fixed a kernel crash by an MLDv2
Query (Multicast Address and Source Specific Query).
Something went wrong with that request. Please try again.