Subject: Re: New IP-Filter
To: Martin Husemann <martin@duskware.de>
From: Bill Studenmund <wrstuden@netbsd.org>
List: tech-kern
Date: 03/29/2004 14:41:41
--NY6JkbSqL3W9mApi
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Mar 30, 2004 at 12:35:07AM +0200, Martin Husemann wrote:
> So the new IP-Filter code does not work for me at all.
>=20
> Can anyone tell me
>=20
> - that it works for him (on what arch?)
> - why it does not need the patch below?
> - and optionally (most welcome) why the patch below is not sufficient
> to make it realy work?
>=20
> To me it looks like on NetBSD it defines COPYIN() and COPYOUT() as just b=
copy
> (aka memcpy), thus failing to copy ioctl arguments (pointed to by the pri=
mary
> ioctl argument) in/out of kernel space. It uses BCOPYIN() and BCOPYOUT() =
for
> the primary ioctl argument, which is already copied into/outof kernel by
> the ioctl framework.
Sounds like it needs those changes. It probably works on some=20
architectures as they have kernel and userland mapped into the same VA=20
space.
Take care,
Bill
--NY6JkbSqL3W9mApi
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)
iD8DBQFAaKYlWz+3JHUci9cRAr5vAJ4/Qo2mCVe+vN5718kjqkZTj5taMQCfaNuJ
TPGR/gYnb+wom+x/2m3AYfA=
=NexN
-----END PGP SIGNATURE-----
--NY6JkbSqL3W9mApi--