Thank you for working on this.
Could we also add some test cases to contrib/capsicum-test ?

Ok :)

Why is that the goal? What's the problem with sending an nvlist that's part of another list? It's a natural and useful thing to be able to do. The only thing preventing it seems to be an oversight in the nvlist traversal code.

The goal, which obviously was not met, was to prevent sending an nvlist that is part of another list (array or list).
I think we should return an error from send/dump. What do you think?

Thank you.

I like this change, but I will verify it tomorrow if its fine with you :)
As I need to wrap my head around this calculations.

Address fedback from bapt@

I have missed this one. I simply looked into syscalls from ntpd.

Oh, ok.

Seems reasonable, thanks!

It still doesn't seem right.

Hym I don't think this is complete patch.
Can you try to regenerate git diff -U99999 first_commit^ (the ^ is important)

In the "Test plan" please provide an example of testing blocking (forked version) and unblocked version.

Change wording in man page.

Update man page.