Subject: Re: New IP-Filter
To: Martin Husemann <martin@duskware.de>
From: Bill Studenmund <wrstuden@netbsd.org>
List: tech-kern
Date: 03/29/2004 14:41:41
--NY6JkbSqL3W9mApi
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Mar 30, 2004 at 12:35:07AM +0200, Martin Husemann wrote:
> So the new IP-Filter code does not work for me at all.
>=20
> Can anyone tell me
>=20
>  - that it works for him (on what arch?)
>  - why it does not need the patch below?
>  - and optionally (most welcome) why the patch below is not sufficient
>    to make it realy work?
>=20
> To me it looks like on NetBSD it defines COPYIN() and COPYOUT() as just b=
copy
> (aka memcpy), thus failing to copy ioctl arguments (pointed to by the pri=
mary
> ioctl argument) in/out of kernel space. It uses BCOPYIN() and BCOPYOUT() =
for
> the primary ioctl argument, which is already copied into/outof kernel by
> the ioctl framework.

Sounds like it needs those changes. It probably works on some=20
architectures as they have kernel and userland mapped into the same VA=20
space.

Take care,

Bill

--NY6JkbSqL3W9mApi
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)

iD8DBQFAaKYlWz+3JHUci9cRAr5vAJ4/Qo2mCVe+vN5718kjqkZTj5taMQCfaNuJ
TPGR/gYnb+wom+x/2m3AYfA=
=NexN
-----END PGP SIGNATURE-----

--NY6JkbSqL3W9mApi--