linux-stable.git/net/netfilter/ipset, branch linux-3.13.y

netfilter: ipset: fix incorret comparison in hash_netnet4_data_equal()

2013-11-25T21:42:18+00:00

Both sides of the comparison are the same, looks like a cut-and-paste error.

Spotted by Coverity.

Signed-off-by: Dave Jones 
Signed-off-by: Pablo Neira Ayuso

netfilter: ipset: remove duplicate define

2013-10-27T18:24:45+00:00

This patch removes a duplicate define from
net/netfilter/ipset/ip_set_hash_gen.h

Signed-off-by: Michael Opdenacker 
Signed-off-by: Jozsef Kadlecsik

netfilter:ipset: Fix memory allocation for bitmap:port

2013-10-27T18:24:39+00:00

At the restructuring of the bitmap types creation in ipset, for the
bitmap:port type wrong (too large) memory allocation was copied
(netfilter bugzilla id #859).

Reported-by: Quentin Armitage 
Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: The unnamed union initialization may lead to compilation error

2013-10-22T08:14:01+00:00

The unnamed union should be possible to be initialized directly, but
unfortunately it's not so:

/usr/src/ipset/kernel/net/netfilter/ipset/ip_set_hash_netnet.c: In
function ?hash_netnet4_kadt?:
/usr/src/ipset/kernel/net/netfilter/ipset/ip_set_hash_netnet.c:141:
error: unknown field ?cidr? specified in initializer

Reported-by: Husnu Demir 
Signed-off-by: Jozsef Kadlecsik 
Signed-off-by: Pablo Neira Ayuso

netfilter: ipset: Use netlink callback dump args only

2013-10-22T08:13:59+00:00

Instead of cb->data, use callback dump args only and introduce symbolic
names instead of plain numbers at accessing the argument members.

Signed-off-by: Jozsef Kadlecsik 
Signed-off-by: Pablo Neira Ayuso

netfilter: ipset: Add hash:net,port,net module to kernel.

2013-09-30T19:42:58+00:00

This adds a new set that provides similar functionality to ip,port,net
but permits arbitrary size subnets for both the first and last
parameter.

Signed-off-by: Oliver Smith 
Signed-off-by: Jozsef Kadlecsik

netfiler: ipset: Add net namespace for ipset

2013-09-30T19:42:52+00:00

This patch adds netns support for ipset.

Major changes were made in ip_set_core.c and ip_set.h.
Global variables are moved to per net namespace.
Added initialization code and the destruction of the network namespace ipset subsystem.
In the prototypes of public functions ip_set_* added parameter "struct net*".

The remaining corrections related to the change prototypes of public functions ip_set_*.

The patch for git://git.netfilter.org/ipset.git commit 6a4ec96c0b8caac5c35474e40e319704d92ca347

Signed-off-by: Vitaly Lavrov 
Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Use a common function at listing the extensions

2013-09-30T19:42:36+00:00

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: For set:list types, replaced elements must be zeroed out

2013-09-30T19:33:29+00:00

The new extensions require zero initialization for the new element
to be added into a slot from where another element was pushed away.

Signed-off-by: Jozsef Kadlecsik

netfilter: ipset: Fix hash resizing with comments

2013-09-30T19:33:29+00:00

The destroy function must take into account that resizing doesn't
create new extensions so those cannot be destroyed at resize.

Signed-off-by: Jozsef Kadlecsik