From owner-cvs-src@FreeBSD.ORG Tue Oct 28 21:40:08 2003 Return-Path: Delivered-To: cvs-src@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C9FF316A4CE; Tue, 28 Oct 2003 21:40:08 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5659043FE0; Tue, 28 Oct 2003 21:40:08 -0800 (PST) (envelope-from sam@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.9/8.12.9) with ESMTP id h9T5e8XJ076870; Tue, 28 Oct 2003 21:40:08 -0800 (PST) (envelope-from sam@repoman.freebsd.org) Received: (from sam@localhost) by repoman.freebsd.org (8.12.9/8.12.9/Submit) id h9T5e7OT076869; Tue, 28 Oct 2003 21:40:07 -0800 (PST) (envelope-from sam) Message-Id: <200310290540.h9T5e7OT076869@repoman.freebsd.org> From: Sam Leffler Date: Tue, 28 Oct 2003 21:40:07 -0800 (PST) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/net if_loop.c src/sys/netinet ip_icmp.c src/sys/kern uipc_mbuf2.c src/sys/sys mbuf.h X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Oct 2003 05:40:08 -0000 sam 2003/10/28 21:40:07 PST FreeBSD src repository Modified files: sys/net if_loop.c sys/netinet ip_icmp.c sys/kern uipc_mbuf2.c sys/sys mbuf.h Log: Introduce the notion of "persistent mbuf tags"; these are tags that stay with an mbuf until it is reclaimed. This is in contrast to tags that vanish when an mbuf chain passes through an interface. Persistent tags are used, for example, by MAC labels. Add an m_tag_delete_nonpersistent function to strip non-persistent tags from mbufs and use it to strip such tags from packets as they pass through the loopback interface and when turned around by icmp. This fixes problems with "tag leakage". Pointed out by: Jonathan Stone Reviewed by: Robert Watson Revision Changes Path 1.21 +17 -0 src/sys/kern/uipc_mbuf2.c 1.88 +1 -0 src/sys/net/if_loop.c 1.81 +1 -0 src/sys/netinet/ip_icmp.c 1.125 +17 -1 src/sys/sys/mbuf.h