]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC r348987, r348989:
authorcy <cy@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Fri, 12 Jul 2019 00:50:33 +0000 (00:50 +0000)
committercy <cy@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Fri, 12 Jul 2019 00:50:33 +0000 (00:50 +0000)
commit2387715c49e45565233a19035b4b09e175e77cba
treecbafffb038f709ed3ac101173b274c05dee3e1e2
parentb5c9a80b79aa8798bef6c5bfe28324722a2f72b1
MFC r348987, r348989:

Resolve IPv6 checksum errors with stateful inspection. According to
PR/203585 this appears to have been broken by r235959, which predates
the ipfilter 5.1.2 import into FreeBSD.

The IPv6 checksum calculation is incorrect. To resolve this we call
in6_cksum() to do the the heavy lifting for us, through a new function
ipf_pcksum6(). Should we need to revisit this area again, a DTrace probe
is added to aid with future debugging.

Plus whitespace adjustments (r348989).

PR: 203275, 203585
Differential Revision: https://reviews.freebsd.org/D20583

git-svn-id: svn://svn.freebsd.org/base/stable/10@349927 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/contrib/ipfilter/netinet/fil.c
sys/contrib/ipfilter/netinet/ip_fil.h
sys/contrib/ipfilter/netinet/ip_fil_freebsd.c