linux-stable.git/net/ipv6, branch linux-2.6.12.y

[PATCH] Fix SKB leak in ip6_input_finish()

2005-08-29T16:55:13+00:00

Changing it to how ip_input handles should fix it.

Signed-off-by: Patrick McHardy 
Signed-off-by: "David S. Miller" 
Signed-off-by: Chris Wright

[PATCH] Restrict socket policy loading to CAP_NET_ADMIN - CAN-2005-2555

2005-08-29T16:55:11+00:00

The interface needs much redesigning if we wish to allow
normal users to do this in some way.

Signed-off-by: Herbert Xu 
Signed-off-by: "David S. Miller" 
Signed-off-by: Chris Wright

[PATCH] Fix deadlock in ip6_queue

2005-08-05T07:04:18+00:00

[NETFILTER]: Fix deadlock in ip6_queue

Already fixed in ip_queue, ip6_queue was missed.

Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

[IPv6] Don't generate temporary for TUN devices

2005-06-13T22:01:34+00:00

Userland layer-2 tunneling devices allocated through the TUNTAP driver 
(drivers/net/tun.c) have a type of ARPHRD_NONE, and have no link-layer 
address. The kernel complains at regular interval when IPv6 Privacy 
extension are enabled because it can't find an hardware address :

Dec 29 11:02:04 auguste kernel: __ipv6_regen_rndid(idev=cb3e0c00): 
cannot get EUI64 identifier; use random bytes.

IPv6 Privacy extensions should probably be disabled on that sort of 
device. They won't work anyway. If userland wants a more usual 
Ethernet-ish interface with usual IPv6 autoconfiguration, it will use a 
TAP device with an emulated link-layer  and a random hardware address 
rather than a TUN device.

As far as I could fine, TUN virtual device from TUNTAP is the very only 
sort of device using ARPHRD_NONE as kernel device type.

Signed-off-by: R�mi Denis-Courmont 
Acked-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[IPV6]: Ensure to use icmpv6_socket in non-preemptive context.

2005-06-13T21:59:44+00:00

We saw following trace several times:

|BUG: using smp_processor_id() in preemptible [00000001] code: httpd/30137
|caller is icmpv6_send+0x23/0x540
| [] smp_processor_id+0x9b/0xb8
| [] icmpv6_send+0x23/0x540

This is because of icmpv6_socket, which is the only one user of
smp_processor_id() in icmpv6_send(), AFAIK.

Since it should be used in non-preemptive context,
let's defer the dereference after disabling preemption
(by icmpv6_xmit_lock()).

Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[IPV6]: Update parm.link in ip6ip6_tnl_change()

2005-06-08T21:54:38+00:00

Signed-off-by: Gabor Fekete 
Signed-off-by: David S. Miller

[IPV6]: Kill export of fl6_sock_lookup.

2005-06-02T20:06:36+00:00

There is no usage of this EXPORT_SYMBOL in the kernel.

Signed-off-by: Adrian Bunk 
Acked-by: Hideaki YOSHIFUJI 
Signed-off-by: David S. Miller

[IPV6]: Clear up user copy warning in flowlabel code.

2005-05-30T03:28:01+00:00

We are intentionally ignoring the copy_to_user() value,
make it clear to the compiler too.

Noted by Jeff Garzik.

Signed-off-by: David S. Miller

From: Kazunori Miyazawa

2005-05-26T19:58:04+00:00

[XFRM] Call dst_check() with appropriate cookie

This fixes infinite loop issue with IPv6 tunnel mode.

Signed-off-by: Kazunori Miyazawa 
Signed-off-by: Hideaki YOSHIFUJI 
Signed-off-by: David S. Miller

[IPV6]: Fix xfrm tunnel oops with large packets

2005-05-23T20:11:07+00:00

Signed-off-by: Herbert Xu 
Acked-by: Hideaki YOSHIFUJI 
Signed-off-by: David S. Miller