From: Christopher Pascoe (pascoecvs.openbsd.org)
Date: Sun Dec 02 2007 - 06:08:04 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

CVSROOT: /cvs
Module name: src
Changes by: pascoecvs.openbsd.org 2007/12/02 05:08:04

Modified files:
        share/man/man4 : pf.4
        sys/net : pf_ioctl.c pfvar.h

Log message:
DIOC{GET,ADD}STATE incorrectly use a user provided pointer without using
copyin/out. Change the API so that the state is included in the ioctl
argument, so the ioctl wrappers take care of copying memory as appropriate.

Also change the DIOCGETSTATE API to be more useful. Instead of getting
an arbitrarily "numbered" state (using numbering that can change between
calls), instead search based on id and creatorid. If you want to monitor
only a particular state, you can now use the bulk functions first to find
the appropriate id/creatorid and then fetch it directly from then on.

ok dlg henning

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]