opnsense-src/sys/compat
David Schultz aa675b572f Reject packets larger than IP_MAXPACKET in linux_sendto() for sockets
with the IP_HDRINCL option set.  Without this change, a Linux process
with access to a raw socket could cause a kernel panic.  Raw sockets
must be created by root, and are generally not consigned to untrusted
applications; hence, the security implications of this bug are
minimal.  I believe this only affects 6-CURRENT on or after 2005-01-30.

Found by:	Coverity Prevent analysis tool
Security:	Local DOS
2005-03-23 08:28:00 +00:00
..
freebsd32 Use kern_kevent instead of the stackgap for 32bit syscall wrapping. 2005-03-01 17:45:55 +00:00
ia32 o Split out kernel part of execve(2) syscall into two parts: one that 2005-01-29 23:12:00 +00:00
linprocfs Always produce cpuX entries, even in the case when there is only one CPU 2005-03-06 22:28:14 +00:00
linux Reject packets larger than IP_MAXPACKET in linux_sendto() for sockets 2005-03-23 08:28:00 +00:00
ndis s/SLIST/STAILQ/ 2005-03-18 11:57:44 +00:00
netbsd Start each of the license/copyright comments with /*- 2005-01-05 22:34:37 +00:00
pecoff remove dead code 2005-02-22 01:26:48 +00:00
svr4 fixup signal mapping: 2005-02-25 19:34:10 +00:00