linux-stable.git/net/ipv6, branch v3.1

gro: refetch inet6_protos[] after pulling ext headers

2011-10-10T18:26:16+00:00

ipv6_gro_receive() doesn't update the protocol ops after pulling
the ext headers. It looks like a typo.

Signed-off-by: Zheng Yan 
Acked-by: Eric Dumazet 
Signed-off-by: David S. Miller

tcp: properly handle md5sig_pool references

2011-10-05T03:31:24+00:00

tcp_v4_clear_md5_list() assumes that multiple tcp md5sig peers
only hold one reference to md5sig_pool. but tcp_v4_md5_do_add()
increases use count of md5sig_pool for each peer. This patch
makes tcp_v4_md5_do_add() only increases use count for the first
tcp md5sig peer.

Signed-off-by: Zheng Yan 
Signed-off-by: David S. Miller

ipv6: nullify ipv6_ac_list and ipv6_fl_list when creating new socket

2011-09-29T04:32:10+00:00

ipv6_ac_list and ipv6_fl_list from listening socket are inadvertently
shared with new socket created for connection.

Signed-off-by: Zheng Yan 
Signed-off-by: David S. Miller

ipv6-multicast: Fix memory leak in IPv6 multicast.

2011-09-27T19:34:00+00:00

If reg_vif_xmit cannot find a routing entry, be sure to
free the skb before returning the error.

Signed-off-by: Ben Greear 
Signed-off-by: David S. Miller

ipv6: check return value for dst_alloc

2011-09-27T19:32:06+00:00

return value of dst_alloc must be checked before use

Signed-off-by: Madalin Bucur 
Signed-off-by: David S. Miller

ipv6-multicast: Fix memory leak in input path.

2011-09-27T19:16:08+00:00

Have to free the skb before returning if we fail
the fib lookup.

Signed-off-by: Ben Greear 
Signed-off-by: David S. Miller

ipv6: fix a possible double free

2011-09-20T19:10:16+00:00

When calling snmp6_alloc_dev fails, the snmp6 relevant memory
are freed by snmp6_alloc_dev. Calling in6_dev_finish_destroy
will free these memory twice.

Double free will lead that undefined behavior occurs.

Signed-off-by: Roy Li 
Acked-by: Eric Dumazet 
Signed-off-by: David S. Miller

ipv6: don't use inetpeer to store metrics for routes.

2011-09-17T04:57:26+00:00

Current IPv6 implementation uses inetpeer to store metrics for
routes. The problem of inetpeer is that it doesn't take subnet
prefix length in to consideration. If two routes have the same
address but different prefix length, they share same inetpeer.
So changing metrics of one route also affects the other. The
fix is to allocate separate metrics storage for each route.

Signed-off-by: Zheng Yan 
Signed-off-by: David S. Miller

Merge branch 'master' of ../netdev/

2011-09-16T05:09:02+00:00

tcp: Change possible SYN flooding messages

2011-09-15T18:49:43+00:00

"Possible SYN flooding on port xxxx " messages can fill logs on servers.

Change logic to log the message only once per listener, and add two new
SNMP counters to track :

TCPReqQFullDoCookies : number of times a SYNCOOKIE was replied to client

TCPReqQFullDrop : number of times a SYN request was dropped because
syncookies were not enabled.

Based on a prior patch from Tom Herbert, and suggestions from David.

Signed-off-by: Eric Dumazet 
CC: Tom Herbert 
Signed-off-by: David S. Miller