CVS commit: src

["Mindaugas Rasiukevicius" <rmind%netbsd.org@localhost>]

Module Name:    src
Committed By:   rmind
Date:           Sat Sep 29 14:41:37 UTC 2018

Modified Files:
        src/lib/libnpf: Makefile libnpf.3 npf.c npf.h
        src/lib/npf: mod.mk
        src/lib/npf/ext_log: npfext_log.c
        src/lib/npf/ext_normalize: npfext_normalize.c
        src/lib/npf/ext_rndblock: npfext_rndblock.c
        src/libexec/identd: Makefile
        src/sys/compat/netbsd32: netbsd32_ioctl.c netbsd32_ioctl.h
        src/sys/modules/if_npflog: Makefile
        src/sys/modules/npf: Makefile
        src/sys/modules/npf_alg_icmp: Makefile
        src/sys/modules/npf_ext_log: Makefile
        src/sys/modules/npf_ext_normalize: Makefile
        src/sys/modules/npf_ext_rndblock: Makefile
        src/sys/net/npf: files.npf if_npflog.c if_npflog.h lpm.c lpm.h npf.c
            npf.h npf_alg.c npf_alg_icmp.c npf_bpf.c npf_conf.c npf_conn.c
            npf_conn.h npf_conndb.c npf_ctl.c npf_ext_log.c npf_ext_normalize.c
            npf_ext_rndblock.c npf_handler.c npf_if.c npf_ifaddr.c npf_impl.h
            npf_inet.c npf_mbuf.c npf_nat.c npf_os.c npf_rproc.c npf_ruleset.c
            npf_sendpkt.c npf_state.c npf_state_tcp.c npf_tableset.c
            npf_worker.c npfkern.h
        src/sys/rump/net/lib/libnpf: Makefile
        src/usr.bin/kdump: Makefile.ioctl-c mkioctls
        src/usr.sbin/npf/npfctl: Makefile npf_bpf_comp.c npf_build.c npf_data.c
            npf_extmod.c npf_parse.y npf_scan.l npf_show.c npf_var.c npf_var.h
            npfctl.c npfctl.h
        src/usr.sbin/npf/npfd: Makefile
        src/usr.sbin/npf/npftest: Makefile README npftest.c npftest.h
        src/usr.sbin/npf/npftest/libnpftest: Makefile npf_bpf_test.c
            npf_mbuf_subr.c npf_perf_test.c npf_rule_test.c npf_table_test.c
            npf_test.h npf_test_subr.c
Added Files:
        src/sys/net/npf: README
        src/usr.sbin/npf: README

Log Message:
NPF: Major rework -- migrate NPF to the libnv library.
- This conversion significantly simplifies the code and moves NPF to
  a binary serialisation format (replacing the XML-like format).
- Fix some memory/reference leaks and possibly use-after-free bugs.
- Bump NPF_VERSION as this change makes libnpf incompatible with the
  previous versions.  Also, different serialisation format means NPF
  connection/config saving and loading is not compatible with the
  previous versions either.

Thanks to christos@ for extra testing.


To generate a diff of this commit:
cvs rdiff -u -r1.6 -r1.7 src/lib/libnpf/Makefile
cvs rdiff -u -r1.5 -r1.6 src/lib/libnpf/libnpf.3
cvs rdiff -u -r1.43 -r1.44 src/lib/libnpf/npf.c
cvs rdiff -u -r1.33 -r1.34 src/lib/libnpf/npf.h
cvs rdiff -u -r1.6 -r1.7 src/lib/npf/mod.mk
cvs rdiff -u -r1.4 -r1.5 src/lib/npf/ext_log/npfext_log.c
cvs rdiff -u -r1.1 -r1.2 src/lib/npf/ext_normalize/npfext_normalize.c
cvs rdiff -u -r1.1 -r1.2 src/lib/npf/ext_rndblock/npfext_rndblock.c
cvs rdiff -u -r1.16 -r1.17 src/libexec/identd/Makefile
cvs rdiff -u -r1.95 -r1.96 src/sys/compat/netbsd32/netbsd32_ioctl.c
cvs rdiff -u -r1.63 -r1.64 src/sys/compat/netbsd32/netbsd32_ioctl.h
cvs rdiff -u -r1.1 -r1.2 src/sys/modules/if_npflog/Makefile
cvs rdiff -u -r1.21 -r1.22 src/sys/modules/npf/Makefile
cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_alg_icmp/Makefile
cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_ext_log/Makefile
cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_ext_normalize/Makefile
cvs rdiff -u -r1.1 -r1.2 src/sys/modules/npf_ext_rndblock/Makefile
cvs rdiff -u -r0 -r1.1 src/sys/net/npf/README
cvs rdiff -u -r1.20 -r1.21 src/sys/net/npf/files.npf \
    src/sys/net/npf/npf_mbuf.c
cvs rdiff -u -r1.5 -r1.6 src/sys/net/npf/if_npflog.c
cvs rdiff -u -r1.1 -r1.2 src/sys/net/npf/if_npflog.h src/sys/net/npf/lpm.h \
    src/sys/net/npf/npfkern.h
cvs rdiff -u -r1.4 -r1.5 src/sys/net/npf/lpm.c src/sys/net/npf/npf_worker.c
cvs rdiff -u -r1.35 -r1.36 src/sys/net/npf/npf.c
cvs rdiff -u -r1.57 -r1.58 src/sys/net/npf/npf.h
cvs rdiff -u -r1.17 -r1.18 src/sys/net/npf/npf_alg.c
cvs rdiff -u -r1.30 -r1.31 src/sys/net/npf/npf_alg_icmp.c
cvs rdiff -u -r1.13 -r1.14 src/sys/net/npf/npf_bpf.c \
    src/sys/net/npf/npf_conn.h
cvs rdiff -u -r1.11 -r1.12 src/sys/net/npf/npf_conf.c
cvs rdiff -u -r1.24 -r1.25 src/sys/net/npf/npf_conn.c
cvs rdiff -u -r1.3 -r1.4 src/sys/net/npf/npf_conndb.c \
    src/sys/net/npf/npf_ifaddr.c
cvs rdiff -u -r1.50 -r1.51 src/sys/net/npf/npf_ctl.c
cvs rdiff -u -r1.14 -r1.15 src/sys/net/npf/npf_ext_log.c
cvs rdiff -u -r1.8 -r1.9 src/sys/net/npf/npf_ext_normalize.c \
    src/sys/net/npf/npf_if.c
cvs rdiff -u -r1.7 -r1.8 src/sys/net/npf/npf_ext_rndblock.c
cvs rdiff -u -r1.44 -r1.45 src/sys/net/npf/npf_handler.c
cvs rdiff -u -r1.72 -r1.73 src/sys/net/npf/npf_impl.h
cvs rdiff -u -r1.51 -r1.52 src/sys/net/npf/npf_inet.c
cvs rdiff -u -r1.43 -r1.44 src/sys/net/npf/npf_nat.c
cvs rdiff -u -r1.9 -r1.10 src/sys/net/npf/npf_os.c
cvs rdiff -u -r1.16 -r1.17 src/sys/net/npf/npf_rproc.c
cvs rdiff -u -r1.46 -r1.47 src/sys/net/npf/npf_ruleset.c
cvs rdiff -u -r1.19 -r1.20 src/sys/net/npf/npf_sendpkt.c
cvs rdiff -u -r1.18 -r1.19 src/sys/net/npf/npf_state.c \
    src/sys/net/npf/npf_state_tcp.c
cvs rdiff -u -r1.27 -r1.28 src/sys/net/npf/npf_tableset.c
cvs rdiff -u -r1.20 -r1.21 src/sys/rump/net/lib/libnpf/Makefile
cvs rdiff -u -r1.37 -r1.38 src/usr.bin/kdump/Makefile.ioctl-c
cvs rdiff -u -r1.52 -r1.53 src/usr.bin/kdump/mkioctls
cvs rdiff -u -r0 -r1.1 src/usr.sbin/npf/README
cvs rdiff -u -r1.12 -r1.13 src/usr.sbin/npf/npfctl/Makefile
cvs rdiff -u -r1.10 -r1.11 src/usr.sbin/npf/npfctl/npf_bpf_comp.c \
    src/usr.sbin/npf/npfctl/npf_var.c
cvs rdiff -u -r1.45 -r1.46 src/usr.sbin/npf/npfctl/npf_build.c \
    src/usr.sbin/npf/npfctl/npfctl.h
cvs rdiff -u -r1.28 -r1.29 src/usr.sbin/npf/npfctl/npf_data.c
cvs rdiff -u -r1.4 -r1.5 src/usr.sbin/npf/npfctl/npf_extmod.c
cvs rdiff -u -r1.46 -r1.47 src/usr.sbin/npf/npfctl/npf_parse.y
cvs rdiff -u -r1.26 -r1.27 src/usr.sbin/npf/npfctl/npf_scan.l
cvs rdiff -u -r1.25 -r1.26 src/usr.sbin/npf/npfctl/npf_show.c
cvs rdiff -u -r1.8 -r1.9 src/usr.sbin/npf/npfctl/npf_var.h
cvs rdiff -u -r1.55 -r1.56 src/usr.sbin/npf/npfctl/npfctl.c
cvs rdiff -u -r1.5 -r1.6 src/usr.sbin/npf/npfd/Makefile
cvs rdiff -u -r1.10 -r1.11 src/usr.sbin/npf/npftest/Makefile
cvs rdiff -u -r1.6 -r1.7 src/usr.sbin/npf/npftest/README
cvs rdiff -u -r1.21 -r1.22 src/usr.sbin/npf/npftest/npftest.c
cvs rdiff -u -r1.14 -r1.15 src/usr.sbin/npf/npftest/npftest.h
cvs rdiff -u -r1.8 -r1.9 src/usr.sbin/npf/npftest/libnpftest/Makefile \
    src/usr.sbin/npf/npftest/libnpftest/npf_bpf_test.c
cvs rdiff -u -r1.6 -r1.7 src/usr.sbin/npf/npftest/libnpftest/npf_mbuf_subr.c
cvs rdiff -u -r1.5 -r1.6 src/usr.sbin/npf/npftest/libnpftest/npf_perf_test.c
cvs rdiff -u -r1.14 -r1.15 \
    src/usr.sbin/npf/npftest/libnpftest/npf_rule_test.c
cvs rdiff -u -r1.9 -r1.10 \
    src/usr.sbin/npf/npftest/libnpftest/npf_table_test.c
cvs rdiff -u -r1.16 -r1.17 src/usr.sbin/npf/npftest/libnpftest/npf_test.h
cvs rdiff -u -r1.12 -r1.13 \
    src/usr.sbin/npf/npftest/libnpftest/npf_test_subr.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.