linux-stable.git/net/ipv6, branch linux-2.6.19.y

[PATCH] IPV6 MCAST: Fix joining all-node multicast group on device initialization.

2007-02-05T16:31:41+00:00

Join all-node multicast group after assignment of dev->ip6_ptr
because it must be assigned when ipv6_dev_mc_inc() is called.
This fixes Bug#7817, reported by .

Closes: 7817
Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: Chris Wright

[PATCH] NETFILTER: nf_conntrack_ipv6: fix crash when handling fragments

2007-02-05T16:31:40+00:00

When IPv6 connection tracking splits up a defragmented packet into
its original fragments, the packets are taken from a list and are
passed to the network stack with skb->next still set. This causes
dev_hard_start_xmit to treat them as GSO fragments, resulting in
a use after free when connection tracking handles the next fragment.

Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright

[PATCH] IPV4/IPV6: Fix inet{,6} device initialization order.

2007-01-10T19:05:23+00:00

It is important that we only assign dev->ip{,6}_ptr
only after all portions of the inet{,6} are setup.

Otherwise we can receive packets before the multicast
spinlocks et al. are initialized.

Signed-off-by: David L Stevens 
Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[PATCH] NETFILTER: Fix {ip, ip6, arp}_tables hook validation

2006-12-11T19:32:38+00:00

Commit 590bdf7fd2292b47c428111cb1360e312eff207e introduced a regression
in match/target hook validation. mark_source_chains builds a bitmask
for each rule representing the hooks it can be reached from, which is
then used by the matches and targets to make sure they are only called
from valid hooks. The patch moved the match/target specific validation
before the mark_source_chains call, at which point the mask is always zero.

This patch returns back to the old order and moves the standard checks
to mark_source_chains. This allows to get rid of a special case for
standard targets as a nice side-effect.

Signed-off-by: Dmitry Mishin 
Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright

[PATCH] IPV6 NDISC: Calculate packet length correctly for allocation.

2006-12-11T19:32:36+00:00

MAX_HEADER does not include the ipv6 header length in it,
so we need to add it in explicitly.

With help from YOSHIFUJI Hideaki.

Signed-off-by: David S. Miller 
Signed-off-by: Chris Wright

[IPV6]: Fix address/interface handling in UDP and DCCP, according to the scoping architecture.

2006-11-22T01:41:56+00:00

TCP and RAW do not have this issue.  Closes Bug #7432.

Signed-off-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

[IPV6] IP6TUNNEL: Add missing nf_reset() on input path.

2006-11-22T00:16:27+00:00

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: YOSHIFUJI Hideaki

[IPV6] IP6TUNNEL: Delete all tunnel device when unloading module.

2006-11-22T00:16:26+00:00

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: YOSHIFUJI Hideaki

[IPV6] ROUTE: Do not enable router reachability probing in router mode.

2006-11-22T00:16:25+00:00

RFC4191 explicitly states that the procedures are applicable to
hosts only.  We should not have changed behavior of routers.

Signed-off-by: YOSHIFUJI Hideaki

[IPV6] ROUTE: Prefer reachable nexthop only if the caller requests.

2006-11-22T00:16:24+00:00

Signed-off-by: YOSHIFUJI Hideaki