From owner-cvs-src@FreeBSD.ORG  Fri Jul 27 08:25:02 2007
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 86CA316A41F;
	Fri, 27 Jul 2007 08:25:02 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
	[IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id 7B27113C494;
	Fri, 27 Jul 2007 08:25:02 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id l6R8P2tw046592;
	Fri, 27 Jul 2007 08:25:02 GMT
	(envelope-from rwatson@repoman.freebsd.org)
Received: (from rwatson@localhost)
	by repoman.freebsd.org (8.14.1/8.14.1/Submit) id l6R8P2qR046591;
	Fri, 27 Jul 2007 08:25:02 GMT (envelope-from rwatson)
Message-Id: <200707270825.l6R8P2qR046591@repoman.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Fri, 27 Jul 2007 08:25:02 +0000 (UTC)
To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Cc: 
Subject: cvs commit: src/sys/netinet6 udp6_usrreq.c
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2007 08:25:02 -0000

rwatson     2007-07-27 08:25:02 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet6         udp6_usrreq.c 
  Log:
  Continue effort to improve parity between UDPv4 and UDPv6: add a missing
  scope security check for the UDPv6 socket credential lookup service,
  allowing security policies to bound access to credential information.
  While not an immediate issue for Jail, which doesn't allow use of UDPv6,
  this may be relevant to other security policies that may wish to control
  ident lookups.
  
  While here, eliminate a very unlikely panic case, in which a socket in
  the process of being freed is inspected by the sysctl.
  
  Approved by:    re (kensmith)
  Reviewed by:    bz
  
  Revision  Changes    Path
  1.80      +10 -6     src/sys/netinet6/udp6_usrreq.c