{"push_id":624211304,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"b57f3509a8c9916991ca126e02c9e9bcecadcdeb","before":"bda694b5039b18bc664f79ffa2300e095dd4512a","commits":[{"sha":"e192a810c5e18f99296cd0259c1055a90437bb34","author":{"email":"513c04e7aebf88939f3d070f28b1c5fbbba443de@FreeBSD.org","name":"kp"},"message":"pf: Skip firewall for refragmented ip6 packets\n\nIn cases where we scrub (fragment reassemble) on both input and output\nwe risk ending up in infinite loops when forwarding packets.\n\nFragmented packets come in and get collected until we can defragment. At\nthat point the defragmented packet is handed back to the ip stack (at\nthe pfil point in ip6_input(). Normal processing continues.\n\nEventually we figure out that the packet has to be forwarded and we end\nup at the pfil hook in ip6_forward(). After doing the inspection on the\ndefragmented packet we see that the packet has been defragmented and\nbecause we're forwarding we have to refragment it.\n\nIn pf_refragment6() we split the packet up again and then ip6_forward()\nthe individual fragments.  Those fragments hit the pfil hook on the way\nout, so they're collected until we can reconstruct the full packet, at\nwhich point we're right back where we left off and things continue until\nwe run out of stack.\n\nBreak that loop by marking the fragments generated by pf_refragment6()\nas M_SKIP_FIREWALL. There's no point in processing those packets in the\nfirewall anyway. We've already filtered on the full packet.\n\nDifferential Revision:\thttps://reviews.freebsd.org/D2197\nReviewed by:\tglebius, gnn\nApproved by:\tgnn (mentor)","distinct":true,"url":"https://api.github.com/repos/freebsd/freebsd/commits/e192a810c5e18f99296cd0259c1055a90437bb34"},{"sha":"b57f3509a8c9916991ca126e02c9e9bcecadcdeb","author":{"email":"513c04e7aebf88939f3d070f28b1c5fbbba443de@FreeBSD.org","name":"kp"},"message":"Remove duplicate code\n\nWe'll just fall into the same local delivery block under the\n'if (m->m_flags & M_FASTFWD_OURS)'.\n\nSuggested by:\tae\nDifferential Revision:\thttps://reviews.freebsd.org/D2225\nApproved by:\tgnn (mentor)","distinct":true,"url":"https://api.github.com/repos/freebsd/freebsd/commits/b57f3509a8c9916991ca126e02c9e9bcecadcdeb"}]}