In the course of investigating several bugs discovered in NetBSD, I happened to look at the network stacks of other operating systems, to see whether they had already fixed the issues, and if so how. This was done in several layers of the NetBSD kernel, from device drivers to L4 handlers. Dozens of bugs were fixed, among which a good number of actual, remotely-triggerable vulnerabilities.Ĭhanges were made to strengthen the networking subsystems and improve code quality: reinforce the mbuf API, add many KASSERTs to enforce assumptions, simplify packet handling, and verify compliance with RFCs. Over the last five months, hundreds of patches were committed to the source tree as a result of this work.
Maxime Villard has been working on an audit of the NetBSD network stack, a project sponsored by The NetBSD Foundation, which has served all users of BSD-derived operating systems.This brings NetBSD 10 years forward, and they should be able to catch the rest of the way up fairly quickly.dtrace FBT probes can now be placed in kernel modules.In addition to the 10 years of improvements from upstream, this version also has these NetBSD-specific enhancements: r315983 is from March 2017 (14 months ago), so there is still more work to do.This changes the upstream vendor from OpenSolaris to FreeBSD, and this version is based on FreeBSD svn r315983. Merge a new version of the CDDL dtrace and ZFS code. OpenZFS and DTrace updates in NetBSD, NetBSD network security stack audit, Performance of MySQL on ZFS, OpenSMTP results from p2k18, legacy Windows backup to FreeNAS, ZFS block size importance, and NetBSD as router on a stick.
0 kommentar(er)
