CVS commit: [netbsd-7] src/sys/external/bsd/ipf/netinet

["Stephen Borrill" <sborrill%netbsd.org@localhost>]

Module Name:    src
Committed By:   sborrill
Date:           Thu Jun 29 12:24:10 UTC 2017

Modified Files:
        src/sys/external/bsd/ipf/netinet [netbsd-7]: fil.c ip_frag.c ip_state.c

Log Message:
Pull up the following revisions(s) (requested by christos in ticket #1412):
        sys/external/bsd/ipf/netinet/fil.c:             revision 1.20
        sys/external/bsd/ipf/netinet/ip_state.c:        revision 1.7
        sys/external/bsd/ipf/netinet/ip_frag.c:         revision 1.5

Disconnect maintaining fragment state from keeping session state. The user
now must specify keep frags along with keep state to have ipfilter do what
it did before, as documented in ipf.conf.5.
Free the right fragment. This will cause use after free issues and eventually
panic.


To generate a diff of this commit:
cvs rdiff -u -r1.15.2.2 -r1.15.2.3 src/sys/external/bsd/ipf/netinet/fil.c
cvs rdiff -u -r1.3 -r1.3.14.1 src/sys/external/bsd/ipf/netinet/ip_frag.c
cvs rdiff -u -r1.6 -r1.6.4.1 src/sys/external/bsd/ipf/netinet/ip_state.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.