kernel: Remove <sys/mplock2.h> from all files that do not need it.

<net/if.h>: Do not include <net/if_var.h> for _KERNEL

* Clean up an ancient leftover: do not include <net/if_var.h> from <net/if.h>
for kernel stuffs.

* Adjust various files to include the necess

<net/if.h>: Do not include <net/if_var.h> for _KERNEL

* Clean up an ancient leftover: do not include <net/if_var.h> from <net/if.h>
for kernel stuffs.

* Adjust various files to include the necessary <net/if_var.h> header.

NOTE:
I have also tested removing the inclusion of <net/if.h> from <net/if_var.h>,
therefore add <net/if.h> inclusion for those files that need it but only
included <net/if_var.h>. For some files, the header inclusion orderings are
also adjusted.

show more ...

net: Make sure that local variable is really used.

kernel - Cleanup PFIL_MPSAFE

* All pfil use cases are MPSAFE, so remove the PFIL_MPSAFE flag entirely
and remove the old mplock wrappers that tested it.

ipfw/ipfw3 - Add pre-load sysctl to default filter to accept

* Add sysctl and tunable 'net.filters_default_to_accept', which defaults
to off. If this variable is set to non-zero prior to loading

ipfw/ipfw3 - Add pre-load sysctl to default filter to accept

* Add sysctl and tunable 'net.filters_default_to_accept', which defaults
to off. If this variable is set to non-zero prior to loading the ipfw
or ipfw3 modules, IPFW will default to allowing all packets through instead
of denying all packets.

* It is necessary to use this feature for netbooted systems with NFS roots
as the system will not be able to load the rules table after kldloading
the related module(s) otherwise.

show more ...

netisr: Inline netisr_cpuport() and netisr_curport()

These two functions do nothing more than just return pointer to the
element in the array.

Per our header file naming convention, put these two f

netisr: Inline netisr_cpuport() and netisr_curport()

These two functions do nothing more than just return pointer to the
element in the array.

Per our header file naming convention, put these two functions in
net/netisr2.h

show more ...

netisr: Function renaming; no functional changes

This cleans up code for keeping input packets' hash instead of masking
the hash with ncpus2_mask. netisr_hashport(), which maps packet hash
to netis

netisr: Function renaming; no functional changes

This cleans up code for keeping input packets' hash instead of masking
the hash with ncpus2_mask. netisr_hashport(), which maps packet hash
to netisr port, will be added soon.

show more ...

netisr: rename cpu_portfn() to netisr_portfn().

No functional change.

Searched and replaced with:
find sys/ -type f -exec sed -i "" 's/cpu_portfn/netisr_portfn/g' '{}' \;

Initial import of binutils 2.22 on the new vendor branch

Future versions of binutils will also reside on this branch rather
than continuing to create new binutils branches for each new version.

Add PFIL_MPSAFE flag to give hint to pfil(9) that the underlying firewall
code is MPSAFE. Set this flag for ipfw(4).

Save flags pass by caller

struct packet_filter_hook is actually implementation detail; hide it

Make pfil(4) MPSAFE using following way:
- The pfil hook lists alteration is serialized by netisr0 (rev 1.10)
- Duplicate the pfil hook lists to be altered.
- Alter the pfil hook lists' duplication
-

Make pfil(4) MPSAFE using following way:
- The pfil hook lists alteration is serialized by netisr0 (rev 1.10)
- Duplicate the pfil hook lists to be altered.
- Alter the pfil hook lists' duplication
- Save the original pfil hook lists, install the altered pfil hook lists
- Sync all network msgports to make sure that no one sees the original
lists after this syncing
- Free the original pfil hook lists

show more ...

Serialize pfil hooks' adding/removing by netisr0

typedef pfil_func_t

Merge pfil_hook_get() into pfil_run_hooks(), use TAILQ_FOREACH afterwards.

- Use {TAILQ,LIST}_FOREACH
- Minor style changes

pfil_hook_get() is only used in pfil.c, so hide it

Adjust man pages, comments, messages and some defunct driver generation
scripts to the recent malloc(9) -> kmalloc(9) renaming.

Rename malloc->kmalloc, free->kfree, and realloc->krealloc. Pass 1

Forced commit to, belatedly, note that this (rev 1.1) was:

Submitted by: Max Laier <max@love2party.net>

Add a pfil_has_hooks() inline to shortcut calls to pfil_run_hooks(),
allowing us to include PFIL_HOOKS without introducing any performance impact
when no hooks are being used. This is in prep for ma

Add a pfil_has_hooks() inline to shortcut calls to pfil_run_hooks(),
allowing us to include PFIL_HOOKS without introducing any performance impact
when no hooks are being used. This is in prep for making PFIL_HOOKS
permanent.

show more ...

Add the packet filtering files.

network - Major netmsg retooling, part 1

* Remove all the netmsg shims and make all pr_usrreqs and some proto->pr_*
requests directly netmsg'd.

* Fix issues with tcp implied connects and tcp6->tc

network - Major netmsg retooling, part 1

* Remove all the netmsg shims and make all pr_usrreqs and some proto->pr_*
requests directly netmsg'd.

* Fix issues with tcp implied connects and tcp6->tcp4 fallbacks with
implied connects.

* Fix an issue with a stack-based udp netmsg (allocate it)

* Consolidate struct ip6protosw and struct protosw into a single
structure and normalize the API functions which differed between
the two (primarily proto->pr_input()).

* Remove protosw->pr_soport()

* Replace varargs protocol *_input() functions (ongoing) with fixed
arguments.

show more ...

kernel - Move mplock to machine-independent C

* Remove the per-platform mplock code and move it all into
machine-independent code: sys/mplock2.h and kern/kern_mplock.c.

* Inline the critical path

kernel - Move mplock to machine-independent C

* Remove the per-platform mplock code and move it all into
machine-independent code: sys/mplock2.h and kern/kern_mplock.c.

* Inline the critical path.

* When a conflict occurs kern_mplock.c will KTR log the file and line
number of both the holder and conflicting acquirer. Set
debug.ktr.giant_enable=-1 to enable conflict logging.

show more ...