summaryrefslogtreecommitdiff
path: root/external/bsd/ipf
AgeCommit message (Collapse)Author
2023-06-24Fix typo in comment.msaitoh
2023-06-03adapt to ${CC_WNO_MAYBE_UNINITIALIZED}lukem
Use ${CC_WNO_MAYBE_UNINITIALIZED} instead of the older style more complex expressions. Remove workarounds if they were for a specific version of gcc < 10.
2023-06-03ipmon: remove duplicate warning suppressionlukem
2023-06-03adapt to ${CC_WNO_ADDRESS_OF_PACKED_MEMBER}lukem
Simplify CWARNFLAGS to use ${CC_WNO_ADDRESS_OF_PACKED_MEMBER} which works for both clang and gcc, and remove compiler-specific equivalents.
2023-06-03bsd.own.mk: rename GCC_NO_* to CC_WNO_*lukem
Rename compiler-warning-disable variables from GCC_NO_warning to CC_WNO_warning where warning is the full warning name as used by the compiler. GCC_NO_IMPLICIT_FALLTHRU is CC_WNO_IMPLICIT_FALLTHROUGH Using the convention CC_compilerflag, where compilerflag is based on the full compiler flag name.
2023-06-03bsd.own.mk: rename to CC_WNO_ADDRESS_OF_PACKED_MEMBERlukem
Provide a single variable CC_WNO_ADDRESS_OF_PACKED_MEMBER with options for both clang and gcc, to replace CLANG_NO_ADDR_OF_PACKED_MEMBER CC_NO_ADDR_OF_PACKED_MEMBER GCC_NO_ADDR_OF_PACKED_MEMBER Using the convention CC_compilerflag, where compilerflag is based on the full compiler flag name.
2022-06-10PR 56874: avoid using uninitialized memory, patch from Tom Lane.martin
2022-06-03ipf(8): document all -l optionsgutteridge
References to "none", "state", and "nat" were missing in places. Addresses PR bin/36763 from Wolfgang Stukenbrock.
2021-12-05s/vlaue/value/msaitoh
2021-04-12avoid common symbols.mrg
2021-04-12add some new uses of existing GCC_NO_* variables for warning issues.mrg
remove an no longer relevant for gcc7 workaround (works fine in both gcc9 and gcc 10.)
2021-01-05Use the compat machinery to build "native" IPF binaries as ipfiltersimonb
doesn't use compat32 64-bit alignment/size safe structures. Fixes IPF on at least mips64.
2020-09-06add support for new GCC 9 warnings that may be too much to fixmrg
right now. new address-of-packed-member and format-overflow warnings have new GCC_NO_ADDR_OF_PACKED_MEMBER amd GCC_NO_FORMAT_OVERFLOW variables to remove these warnings. apply to a bunch of the tree. mostly, these are real bugs that should be fixed, but in many cases, only by removing the 'packed' attribute from some structure that doesn't really need it. (i looked at many different ones, and while perhaps 60-80% were already properly aligned, it wasn't clear to me that the uses were always coming from sane data vs network alignment, so it doesn't seem safe to remove packed without careful research for each affect struct.) clang already warned (and was not erroring) for many of these cases, but gcc picked up dozens more.
2020-02-12external/bsd/ipf: Fix build failure under LLVM.fox
-Wno-error= flag now only applies to gcc 8 and not to LLVM based builds. Reviewed by: kamil@
2020-02-09external/bsd/ipf: Suppress -Werror=maybe-uninitialized error.fox
Add -Wno-error=maybe-uninitialized in ipsopt.c to prevent build failure. Error was reported when build.sh was run with MKLIBCSANITIZER=yes flag. Reviewed by: kamil@
2020-02-09external/bsd/ipf: Suppress -Werror=format-overflow= error.fox
Add -Wno-error=format-overflow in ipmon.c to prevent build failure. Error was reported when build.sh was run with MKLIBCSANITIZER=yes flag. Reviewed by: kamil@
2019-10-13introduce some common variables for use in GCC warning disables:mrg
GCC_NO_FORMAT_TRUNCATION -Wno-format-truncation (GCC 7/8) GCC_NO_STRINGOP_TRUNCATION -Wno-stringop-truncation (GCC 8) GCC_NO_STRINGOP_OVERFLOW -Wno-stringop-overflow (GCC 8) GCC_NO_CAST_FUNCTION_TYPE -Wno-cast-function-type (GCC 8) use these to turn off warnings for most GCC-8 complaints. many of these are false positives, most of the real bugs are already commited, or are yet to come. we plan to introduce versions of (some?) of these that use the "-Wno-error=" form, which still displays the warnings but does not make it an error, and all of the above will be re-considered as either being "fix me" (warning still displayed) or "warning is wrong."
2019-10-13remove dated commented warning disable.mrg
2019-10-10Typo.uwe
2019-10-05use target size in a couple of strncpy() calls:mrg
- load_hash() has already zeroed the structure so final nul is there. - print_ipflog() copied final byte that was then nul'd.
2019-09-29convert HAVE_GCC == 7 to HAVE_GCC >= 7.mrg
2019-02-05apply -O1 for ipf_y.c on m68k and GCC 7.mrg
2018-12-29ipfstat(8): note -o option applicability, and remove redundant words.gutteridge
2018-04-29fix the build: tcpiphdr is now defined in tcp_var.h and tcp_var.h needschristos
tcp_timer.h. This struct move is more trouble than its worth. It breaks header compatibility with other BSD's and can't be really removed because it is an installed header that will break other 3rd party software. I suggest that it gets reverted!
2018-02-04apply __attribute__((__used__)) for rcsid, etc.mrg
2017-06-15Don't include <sys/user.h> on NetBSD in IPF (lsock)kamil
This header in this context is freebsdism.
2017-06-15Don't include <sys/user.h> on NetBSD in IPF (iptests)kamil
This header in this context is freebsdism.
2017-06-15Don't include <sys/user.h> on NetBSD in IPFkamil
This header in this context is freebsdism.
2017-01-11Disable a couple of warnings until further investigation.joerg
2016-12-26Typokhorben
2016-04-04Separate nexthop caches from the routing tableozaki-r
By this change, nexthop caches (IP-MAC address pair) are not stored in the routing table anymore. Instead nexthop caches are stored in each network interface; we already have lltable/llentry data structure for this purpose. This change also obsoletes the concept of cloning/cloned routes. Cloned routes no longer exist while cloning routes still exist with renamed to connected routes. Noticeable changes are: - Nexthop caches aren't listed in route show/netstat -r - sysctl(NET_RT_DUMP) doesn't return them - If RTF_LLDATA is specified, it returns nexthop caches - Several definitions of routing flags and messages are removed - RTF_CLONING, RTF_XRESOLVE, RTF_LLINFO, RTF_CLONED and RTM_RESOLVE - RTF_CONNECTED is added - It has the same value of RTF_CLONING for backward compatibility - route's -xresolve, -[no]cloned and -llinfo options are removed - -[no]cloning remains because it seems there are users - -[no]connected is introduced and recommended to be used instead of -[no]cloning - route show/netstat -r drops some flags - 'L' and 'c' are not seen anymore - 'C' now indicates a connected route - Gateway value of a route of an interface address is now not a L2 address but "link#N" like a connected (cloning) route - Proxy ARP: "arp -s ... pub" doesn't create a route You can know details of behavior changes by seeing diffs under tests/. Proposed on tech-net and tech-kern: http://mail-index.netbsd.org/tech-net/2016/03/11/msg005701.html
2016-01-23Define _KERNTYPES for things that need it.christos
2015-12-28Correct the example for the port range syntaxkhorben
2015-08-11fix typosprlw1
2015-04-02Fix for PR kern/48109 (and its duplicate kern/49807)khorben
As provided by Takahiro HAYASHI in PR kern/48109. Additional error registration in ipf(8) by myself. Changes tested with GENERIC and XEN3_DOM0. Thanks! XXX pull-up netbsd-7
2015-03-24Fix the description of "< x" and "x <> y" for port numbers.apb
Patch for "< x" from Timo Buhrmester, and for "x <> y" from me.
2015-01-17Do not compile md5.c (while usning system md5.h headers) - instead justmartin
use the libc version. Patch from Yasushi Oshima in PR bin/49580.
2014-12-20MKINET6=no build fixesprlw1
http://mail-index.netbsd.org/tech-net/2014/12/13/msg004898.html
2014-06-29#552 destination port not zero after parsing nat ruledarrenr
3561691 gethost never returns an ipv6 address
2014-06-29#551 ipf.conf address structure not properly zero filleddarrenr
2014-06-29#536 ipnat can try to print rule as dstlist incorrectlydarrenr
2014-06-293561690 ipv6 address for test.hosts.dots in wrong byte orderdarrenr
2014-06-28#534 destination list hashing not endian neutraldarrenr
2014-06-16From Darren Reed: #548 ipfstat hits a bus error on netbsd/sparc64christos
2014-06-12Fix build.joerg
2014-06-12From Darren Reed:christos
This patch fixes "ipfstat" not displaying group rules and fixes problems being able to remove individual rules using ipf/ipnat. #547 rule parsing puts junk at the end of ipf rules #546 ipfstat -io does not list rules in groups aside from 0 Due to unforeseen circumstances I'm not able to commit this myself.
2013-10-20fix unused variable warningschristos
2013-09-21Update LLVM/Clang snapshot to r191105. This brings in a better detectionjoerg
of unused static variables and functions. Disable this for some external code and for ioconf.c in the kernel.
2013-05-08ipfitler -> ipfilterchristos
2013-01-02There is some very dubious code to locate the values ofdsl
tcb.rcv_adv, tcb.snd_nxt and tcb.rcv_nxt for a socket. so set CPPFLAGS+= -D_KMEMUSER