kp committed rG26bb78b77231: libsysdecode: add Netlink attribute decoding infrastructure (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rG145541d4ed79: pf(4) fix NULL pointer dereference in outbound packet path..

kp committed rG850041b02548: pf: include direction in fragment key.

kp committed rG04f25ef716f7: authpf(8) read_config() should chop off trailing white space.

kp committed rGf2202ab5abda: mbuf: make m_unshare() allow unmapped mbufs (authored by takahiro.kurosawa_gmail.com).

kp committed rG40c611d0939f: pfctl: fix incorrect errno checks.

kp committed rGddbf89234312: pfctl: fix CREATE_TABLE error handling.

kp committed rG8a14fcd23a20: pf: fix a crash on sendfile() (authored by takahiro.kurosawa_gmail.com).

kp committed rG6a5ba658dd48: tests/sendfile: move the helper program to common (authored by takahiro.kurosawa_gmail.com).

kp committed rG2039fe8ea421: tests/sendfile_helper: support remote connection (authored by takahiro.kurosawa_gmail.com).

kp committed rGc38abd64dbc1: if_epair: support IFCAP_MEXTPG.

kp committed rG3e3752ce73b7: if_bridge: Remove unused disable parameter in bridge_stop (authored by Acesp25 <acesp25@freebsd.org>).

kp committed rGfa50691ecf87: libsysdecode: decode PF Generic Netlink commands (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rGc268c80fc3d5: libsysdecode: cache Generic Netlink family IDs (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rG80586e853674: libsysdecode: decode Generic Netlink controller messages (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rG8a1576dc26b9: truss: track Netlink socket protocols (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rGc9d98c013486: netlink: add const variants of NLA iteration macros (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rGb8c6f5811b2a: pflog: run VNET_SYSUNINIT in SI_SUB_PROTO_FIREWALL.

kp committed rGe4f3ab161a9e: pflog: create bpf tapping points without ifnet(9).

kp committed rGf95439f6c9d0: libpfctl: retrieve family id only once.

kp committed rG9de06f27b140: libpfctl: fix memory leak.

kp committed rGefcc183f9b0d: pflog: remove unused argument from pflogattach().

kp committed rG6c744621c720: truss: add AF_NETLINK syscall argument decoding support (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rG4c932a4d45fb: netlink: decode netlink message flags symbolically (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rG26a94ad8fb31: pfsync: remove invalid panic.

kp committed rGf4e2f07f0cbc: pfsync: remove invalid panic.

kp committed rGe2903636a069: iflib: Fix mbufs leaked by 0 len packets emitted from the if driver (authored by linnemannr_gmail.com).

kp committed rGfcb31b571124: libpfctl: fix memory leak.

kp committed rG2a478dfc7f9c: libpfctl: retrieve family id only once.

kp committed rGa9ebef44a473: pf: switch to getmicro(up)time().

kp committed rGb0f75189f6cb: pfdenied: fix checking root anchor.

kp committed rG4df539cc3864: pfdenied: fix checking root anchor.

kp committed rG035e87247f84: pfsync: remove invalid panic.

kp committed rG017690e50913: netpfil: add PF netlink command decoding support (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rG3d9cd10b2857: pfdenied: fix checking root anchor.

kp committed rG45aaba521c3b: pf: fix incorrect table decoding in netlink.

kp committed rGfda33ae0a1ac: snmp_pf: fix refresh.

kp committed rGe0d4064bcae3: snmp_pf: fix refresh.

kp committed rGe4130ac13d2f: pf: switch to getmicro(up)time().

kp committed rG64327f769cee: pf: fix incorrect table decoding in netlink.

kp committed rGe5536b061033: pfctl: relax interface name requirement.

kp committed rG9d0b771caa49: pfctl: relax interface name requirement.

kp committed rG91d1c1c2b1e7: pfsync: reject invalid SCTP states.

kp committed rG8d583858e499: pfsync: reject invalid SCTP states.

kp committed rGfab9bfc92751: pf: do not reject rules with colliding hashes.

kp committed rG0cd655f71b46: pf: do not reject rules with colliding hashes.

kp committed rG726ff260ecfa: pfctl: optionally print the rule in the state overview.

kp committed rG4e7c1ff95a51: pfctl: relax interface name requirement.

kp committed rGc24b1d9359b8: pfctl: handle errors from PFNL_CMD_GETSTATES.

kp committed rGa0e4c65f1814: pf: do not reject rules with colliding hashes.

kp committed rG730fb48f1387: pf: improve ASCONF chunk validation.

kp committed rG9fe189c79a81: pf: improve ASCONF chunk validation.

kp committed rGbf6d00afdb61: pfsync: reject invalid SCTP states.

kp committed R11:a1f2cc4491c3: net/libpfctl: add 15.1, remove 13.5.

kp committed rGbf1529d83918: netlink: fix LINT-NOVIMAGE build.

kp committed rGff141ea17cb7: pf: do not allow flags to be changed with securelevel set.

kp committed rGafbda5806304: pf: do not allow flags to be changed with securelevel set.

kp committed rGbea1c2fcd783: pf: improve ASCONF chunk validation.

kp committed rG4fc1503f8617: pf: fix duplicate rule detection for automatic tables.

kp committed rGfdcc60f52841: pf: fix duplicate rule detection for automatic tables.

kp committed rG4001613878fe: pfsync: rename unused variable.

kp committed rGfb8383527517: pf: fix duplicate rule detection for automatic tables.

kp committed rG3103d39cd99f: netlink: fix LINT-NOVIMAGE build.

kp committed rGd5ca00f2d874: pf: do not allow flags to be changed with securelevel set.

kp committed rG07a3501e6c85: loopback: fix use-after-free.

kp committed rG18de44e7b442: pfctl: fix man page and error message for -S option (authored by ross_ross-williams.net).

kp committed rG19eecf94fa16: pfctl: clarify usage of load option flags (authored by ross_ross-williams.net).

kp committed rGff76ec3e9b28: pf: be more robust against interface name conflicts.

kp committed rG05ac1013984c: pf: fix error handling in pf_sourcelim_add().

kp committed rG5b7192230a15: pf: pf_frag_compare() should not be using subtraction to compare fragment IDs.

kp committed rG3c9cd6e4dc59: pf: use correct address family in pfr_pool_get().

kp committed rG13b4a14c719a: libpfctl: fix add state/source limiter.

kp committed rG6f8ea66cbcf2: pfctl: fix how source and state limiters are wired into rbtrees.

kp committed rG95fe1ba5579d: pf tests: test having multiple state limiters.

kp committed rG6642ba36f186: pf tests: explicitly test zeroing counters within an anchor.

kp committed rG8ef0093f297a: truss: add support for decoding Netlink messages (authored by Ishan Agrawal <iagrawal9990@gmail.com>).

kp committed rG5b8ab97b3e4a: pfctl: parser must not ignore error from pfctl_optimize_ruleset().

kp committed rGc5e1dde24dac: pfctl: parser must not ignore error from pfctl_optimize_ruleset().

kp committed rGac6bb58a715e: pf: Fix hashing of IP address ranges (authored by grembo).

kp committed rGe3b801edded9: pf: include all elements when hashing rules.

kp committed rG958dbc87e9c5: pf tests: verify that we handle address range rules correctly.

kp committed rG38f8ac568273: pf: Fix hashing of IP address ranges (authored by grembo).

kp committed rGe79818ec36ef: pfctl: always warn if a duplicate rule was detected.

kp committed rGd107424a44b3: pf: Fix hashing of IP address ranges (authored by grembo).

kp committed rGe224b9b867f4: pfctl: always warn if a duplicate rule was detected.

kp committed rG4311217a039c: pf: include all elements when hashing rules.

kp committed rG6666b2a0e7c2: pf tests: verify that we handle address range rules correctly.

kp committed rG4e007734ff8e: pf tests: verify that we handle address range rules correctly.

kp committed rG536751cb4e15: pf: include all elements when hashing rules.

kp committed rG1fa873c93c8b: pf: Fix hashing of IP address ranges (authored by grembo).

kp committed rG66d66dd0f6f8: pfctl: always warn if a duplicate rule was detected.

kp committed rGc6bcf6e6fd50: pf: include all elements when hashing rules.

kp committed rGab74151e8d09: pf tests: verify that we handle address range rules correctly.

kp committed rG434e1c3d8413: pfctl tests: test rdr-to and nat-to in one rule.

kp committed rG0b0d34fd2f40: pf tests: verify first-match-wins for nat rules.

kp committed rG343ace42f82a: pfctl: parser must not ignore error from pfctl_optimize_ruleset().

kp committed R11:d4dad47577db: net/libpfctl: add 14.4 version.

kp committed rGb642867c2cc7: pf: avoid NULL deref on purged states.

kp committed rG4d0186cd12a7: libpfctl: Sort order of snl attribute parser (authored by eborisch_gmail.com).

kp committed rGdc7eb96ba945: pf tests: verify blocked count on log interface.