You can clone with
HTTPS or Subversion.
use hash for spi-based lookup. it's stupid to go through all sah to f…
LIST_FOREACH is defined in key.c if not, so use it
cleanup, avoid double-loop
avoid null pointer deref
cleanup secasvar management; refcnt is key.c responsibility; alloc/fr…
replay counter check - explicitly check for 0xffffffff for now until
we officially support 2401bis 64bit sequence #
maintain ordered list of SA, based on SA id
missing #ifdef MIP6
fix seed generation
added mip6ctl handling.
fixed syctl names array.
changed some macro names.
added some sysctl switches for mip6
preparation for 64bit sequence number.
introduce SA id (unique ID for SA - SPI is useless as duplicated SPI is allowed)
fix msb handling in 20bits case
use random flowlabel
* sys/netinet6/ip6_id.c: randomize flowlabel and fragment ID.
randomize flowlabel/fragment ID.
u_short -> u_int16_t
don't set ip6_plen where unneeded (i.e. before calling ip6_output)
no need to fill ip6_plen
record source addr of offender
make it compile on non-netbsd
IPV6_MINMTU isn't MTU size.