Commits on Sep 24, 2001
  1. initilized a couple of variables. one is essential to avoid referring…

    … to a
    
    dangling pointer.  the other is for less warnings.
    jinmei committed Sep 24, 2001
  2. spl(soft)net should be necessary for fill_[dp]rlist, because the

    defrouter/prefix list can be modified under the network interrupt level.
    jinmei committed Sep 24, 2001
  3. use splsoftnet for netbsd

    jinmei committed Sep 24, 2001
  4. 2001-09-25 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/kame/addrselect/: a tool to configure the policy table (see
    	below).  This program is also an experimental stuff.
    jinmei committed Sep 24, 2001
  5. 2001-09-25 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/in6_src.c: implemented the policy table for
    	source address selection, according to
    	draft-ietf-ipngwg-default-addr-select-05.
    	The policy table can be configured via the sysctl(3) interface
    	(except for FreeBSD, at this moment).  This implementation is
    	still experimental, and might be changed in the near future.
    jinmei committed Sep 24, 2001
  6. removed a binary file.

    jinmei committed Sep 24, 2001
  7. Initial revision

    jinmei committed Sep 24, 2001
  8. compilation on freebsd

    jinmei committed Sep 24, 2001
  9. implemented the policy table for address selection according to

    draft-ietf-ipngwg-default-addr-select.
    "To be considered" items:
      - using sysctl to set/get the policy is really a good way?
      - port to FreeBSD
    jinmei committed Sep 24, 2001
Commits on Sep 23, 2001
  1. va_start/end audit.

    From: Thomas Klausner <wiz@danbala.ifoer.tuwien.ac.at>
    itojun committed Sep 23, 2001
Commits on Sep 21, 2001
  1. 2001-09-21 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/nd6.c (fill_[dp]rlist): added as shared
    	subroutines for nd6_sysctl_[dp]rlist (for FreeBSD) and nd6_sysctl
    	(for other *BSDs), in order to centralize the complicated logic.
    jinmei committed Sep 21, 2001
  2. used fill_[dp]rlist in nd6_sysctl for code sharing.

    although we have many ifdefs in the new functions, I believe they are worth
    sharing because the copy routine is quite complicated.
    jinmei committed Sep 21, 2001
  3. added two new supplement functions fill_drlist and fill_prlist, which

    was a separate routine for nd6_sysctl_drlist and nd6_sysctl_prlist,
    respectively.  Those new functions are intended to be shared among all *BSDs,
    but are only used by FreeBSD at this moment.
    jinmei committed Sep 21, 2001
  4. 2001-09-21 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/nd6_rtr.c (defrouter_select): removed the
    	default route if there was neither a default router nor the
    	default interface.
    jinmei committed Sep 21, 2001
  5. defrouter_select() removed the default route, if there's neither a de…

    …fault
    
    router nor the default interface.  I believe this is a reasonable behavior.
    jinmei committed Sep 21, 2001
  6. printed "any" when the value of the port field is 65535 and the upper…

    … layer
    
    protocol is ICMPv6.
    sakane committed Sep 21, 2001
  7. 2001-09-21 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/in6_src.c (in6_selectroute): made sure to fill
    	in retifp and retrt, regardless of the return value.  Without this
    	change, the kernel could panic, since ip6_output() refers to the
    	returned ifp even in error cases.
    	All versions of the kernel after the 20010730 snap should be
    	upgraded to fix this problem.
    jinmei committed Sep 21, 2001
  8. (previous change was still incomplete.) corrected the return value of

    in6_selectroute of error cases.
    jinmei committed Sep 21, 2001
  9. in6_selectroute(): made sure to fill in retifp and retrt, regardless of

    the return value, in case that the caller refers to those values even
    after failure.
    jinmei committed Sep 21, 2001
  10. 2001-09-21 JINMEI, Tatuya <jinmei@isl.rdc.toshiba.co.jp>

    	* kame/sys/netinet6/(various files): fixed integer overflow for
    	valid and preferred lifetimes;
    	- introduced new members in nd_prefix{} and in6_ifaddr{} to record
    	  the timestamp of the latest update
    	- check expiration based on the difference between the current
    	  time and the timestamp, not on the explicit expiration times
    jinmei committed Sep 21, 2001
  11. fixed memory leak.

    sakane committed Sep 21, 2001
  12. corrected typos for !freebsd4

    jinmei committed Sep 21, 2001
  13. fixed integer overflow for valid and preferred lifetimes;

    - introduced new members in nd_prefix{} and in6_ifaddr{} to record timestamp
      of the latest update
    - check expiration based on the difference of the current time and the
      timestamp, not on the explicit expiration times
    jinmei committed Sep 21, 2001
  14. valid and preferred lifetimes are unsigned.

    jinmei committed Sep 21, 2001
  15. remove unused variable.

    keiichi committed Sep 21, 2001
  16. route optimize logic change.

    check rthdr of incoming packet.  if the packet don't have a rthdr
    for route optimization, send a BU for route optimization.
    keiichi committed Sep 21, 2001
  17. - Fix bug of a way of keyword table search.

    fujisawa committed Sep 21, 2001
  18. always explicitly set IPV6_V6ONLY.

    itojun committed Sep 21, 2001
  19. * kame/sys/netinet6/ipsec.c:

    When the value of the upper layer of the security policy index (spidx)
    structure is ICMPv6, the port field in "src" of the spidx means ICMPv6
    type, and the port field in "dst" of the spidx specifies ICMPv6 code.
    For example, the following means the policy doesn't require IPsec for
    an inbound Neighbor Solicitation.
    	spdadd ::/0[135] ::/0 icmp6 -P in none;
    sakane committed Sep 21, 2001