Skip to content
Snippets Groups Projects
  1. May 22, 2009
  2. May 21, 2009
  3. May 13, 2009
  4. May 11, 2009
  5. May 10, 2009
  6. May 08, 2009
  7. May 06, 2009
  8. May 04, 2009
  9. Apr 29, 2009
  10. Apr 28, 2009
  11. Apr 23, 2009
  12. Apr 17, 2009
    • Ondřej Zajíček's avatar
      Fixes mixed-up messages on netlink socket · e366625c
      Ondřej Zajíček authored
      Under specific circumstances there might be two mixed-up
      netlink sessions (one for scan, the other for route change
      request). This patch separates netlink scans and requests
      to two fds (and seq counters).
      
      This should fix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=428865
      e366625c
    • Ondřej Zajíček's avatar
      Rewrite of buggy AS path matching. · c8a6b9a3
      Ondřej Zajíček authored
      Old AS path maching supposes thath AS number appears
      only once in AS path, but that is not true. It also
      contains some bugs related to AS path sets.
      
      New code does not use any assumptions about semantic
      structure of AS path. It is asymptotically slower than
      the old code, but on real paths it is not significant.
      
      It also allows '?' for matching one arbitrary AS number.
      c8a6b9a3
  13. Apr 08, 2009
    • Ondřej Zajíček's avatar
      Fixes broken cryptographic authentication in OSPF · 024c310b
      Ondřej Zajíček authored
      Cryptographic authentication in OSPF is defective by
      design - there might be several packets independently
      sent to the network (for example HELLO, LSUPD and LSACK)
      where they might be reordered and that causes crypt.
      sequence number error.
      
      That can be workarounded by not incresing sequence number
      too often. Now we update it only when last packet was sent
      before at least one second. This can constitute a risk of
      replay attacks, but RFC supposes something similar (like time
      in seconds used as CSN).
      024c310b
  14. Apr 06, 2009
  15. Mar 31, 2009
    • Ondřej Zajíček's avatar
      Documentation update · bcb81251
      Ondřej Zajíček authored
      bcb81251
    • Ondřej Zajíček's avatar
      Cleanup changes · c60cdd8c
      Ondřej Zajíček authored
      c60cdd8c
    • Ondřej Zajíček's avatar
      Reimplementation of prefix sets. · b1a597e0
      Ondřej Zajíček authored
      Prefix sets were broken beyond any repair and have to be reimplemented.
      They are reimplemented using a trie with bitmasks in nodes.
      There is also change in the interpretation of minus prefix pattern,
      but the old interpretation was already inconsistent with
      the documentation and broken.
      
      There is also some bugfixes in filter code related to set variables.
      b1a597e0
  16. Mar 25, 2009
  17. Mar 20, 2009
    • Ondřej Zajíček's avatar
      Fix bugs related to kernel table synchronization. · 3d574679
      Ondřej Zajíček authored
      KRF_INSTALLED flag was not cleared during reconfiguration
      that lead to not removing routes during reconfigure when
      export rules changed.
      
      We also should not try to remove routes we didi not installed,
      on Linux this leads to warnings (as kernel checks route source
      field and do not allow to remove non-bird routes) but we should
      not rely on it.
      3d574679