linux-stable.git/include/net/ipv6.h, branch linux-2.6.33.y

netfilter: fix crashes in bridge netfilter caused by fragment jumps

2009-12-15T15:59:59+00:00

When fragments from bridge netfilter are passed to IPv4 or IPv6 conntrack
and a reassembly queue with the same fragment key already exists from
reassembling a similar packet received on a different device (f.i. with
multicasted fragments), the reassembled packet might continue on a different
codepath than where the head fragment originated. This can cause crashes
in bridge netfilter when a fragment received on a non-bridge device (and
thus with skb->nf_bridge == NULL) continues through the bridge netfilter
code.

Add a new reassembly identifier for packets originating from bridge
netfilter and use it to put those packets in insolated queues.

Fixes http://bugzilla.kernel.org/show_bug.cgi?id=14805

Reported-and-Tested-by: Chong Qiao 
Signed-off-by: Patrick McHardy

ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery

2009-12-15T15:59:18+00:00

Currently the same reassembly queue might be used for packets reassembled
by conntrack in different positions in the stack (PREROUTING/LOCAL_OUT),
as well as local delivery. This can cause "packet jumps" when the fragment
completing a reassembled packet is queued from a different position in the
stack than the previous ones.

Add a "user" identifier to the reassembly queue key to seperate the queues
of each caller, similar to what we do for IPv4.

Signed-off-by: Patrick McHardy

net: cleanup include/net

2009-11-04T13:06:25+00:00

This cleanup patch puts struct/union/enum opening braces,
in first line to ease grep games.

struct something
{

becomes :

struct something {

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

net: Make setsockopt() optlen be unsigned.

2009-09-30T23:12:20+00:00

This provides safety against negative optlen at the type
level instead of depending upon (sometimes non-trivial)
checks against this sprinkled all over the the place, in
each and every implementation.

Based upon work done by Arjan van de Ven and feedback
from Linus Torvalds.

Signed-off-by: David S. Miller

udpv6: Remove unused skb argument of ipv6_select_ident()

2009-07-12T21:29:28+00:00

- move ipv6_select_ident() inline function to ipv6.h and remove the unused
  skb argument

Signed-off-by: Sridhar Samudrala 
Acked-by: Herbert Xu 
Signed-off-by: David S. Miller

snmp: add missing counters for RFC 4293

2009-04-27T09:45:02+00:00

The IP MIB (RFC 4293) defines stats for InOctets, OutOctets, InMcastOctets and
OutMcastOctets:
http://tools.ietf.org/html/rfc4293
But it seems we don't track those in any way that easy to separate from other
protocols.  This patch adds those missing counters to the stats file. Tested
successfully by me

With help from Eric Dumazet.

Signed-off-by: Neil Horman 
Signed-off-by: David S. Miller

net: replace __constant_{endian} uses in net headers

2009-02-15T06:58:35+00:00

Base versions handle constant folding now.  For headers exposed to
userspace, we must only expose the __ prefixed versions.

Signed-off-by: Harvey Harrison 
Signed-off-by: David S. Miller

ipv6: making ip and icmp statistics per/namespace

2008-10-08T18:16:45+00:00

Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller

ipv6: added net argument to _DEVINC/_DEVADD

2008-10-08T18:16:19+00:00

Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller

ipv6: added net argument to ICMP6MSGIN_INC_STATS_BH

2008-10-08T18:15:46+00:00

Signed-off-by: Denis V. Lunev 
Signed-off-by: David S. Miller