linux.git/net/ipv4/ip_output.c, branch v2.6.16

[IPV4/6]: Fix UFO error propagation

2006-03-13T04:39:40+00:00

When ufo_append_data fails err is uninitialized, but returned back.
Strangely gcc doesn't notice it.

Coverity #901 and #902

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[XFRM]: Fix SNAT-related crash in xfrm4_output_finish

2006-02-15T23:10:22+00:00

When a packet matching an IPsec policy is SNATed so it doesn't match any
policy anymore it looses its xfrm bundle, which makes xfrm4_output_finish
crash because of a NULL pointer dereference.

This patch directs these packets to the original output path instead. Since
the packets have already passed the POST_ROUTING hook, but need to start at
the beginning of the original output path which includes another
POST_ROUTING invocation, a flag is added to the IPCB to indicate that the
packet was rerouted and doesn't need to pass the POST_ROUTING hook again.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[IPV4]: ip_output.c needs xfrm.h

2006-01-09T22:16:28+00:00

This patch fixes a warning from my IPsec patches:

   CC      net/ipv4/ip_output.o
net/ipv4/ip_output.c: In function 'ip_finish_output':
net/ipv4/ip_output.c:208: warning: implicit declaration of function
'xfrm4_output_finish'

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[IPV4]: make ip_fragment() static

2006-01-07T21:23:39+00:00

Since there's no longer any external user of ip_fragment() we can make 
it static.

Signed-off-by: Adrian Bunk 
Signed-off-by: David S. Miller

[NETFILTER]: Redo policy lookups after NAT when neccessary

2006-01-07T20:57:35+00:00

When NAT changes the key used for the xfrm lookup it needs to be done
again. If a new policy is returned in POST_ROUTING the packet needs
to be passed to xfrm4_output_one manually after all hooks were called
because POST_ROUTING is called with fixed okfn (ip_finish_output).

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NET]: Endian-annotate struct iphdr

2006-01-06T21:24:29+00:00

And fix trivial warnings that emerged.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: David S. Miller

[NETFILTER]: Call POST_ROUTING hook before fragmentation

2006-01-05T20:20:59+00:00

Call POST_ROUTING hook before fragmentation to get rid of the okfn use
in ip_refrag and save the useless fragmentation/defragmentation step
when NAT is used.

The patch introduces one user-visible change, the POSTROUTING chain
in the mangle table gets entire packets, not fragments, which should
simplify use of the MARK and CLASSIFY targets for queueing as a nice
side-effect.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[IPV4]: Safer reassembly

2006-01-03T21:10:31+00:00

Another spin of Herbert Xu's "safer ip reassembly" patch
for 2.6.16.

(The original patch is here:
http://marc.theaimsgroup.com/?l=linux-netdev&m=112281936522415&w=2
and my only contribution is to have tested it.)

This patch (optionally) does additional checks before accepting IP
fragments, which can greatly reduce the possibility of reassembling
fragments which originated from different IP datagrams.

Signed-off-by: Herbert Xu 
Signed-off-by: Arthur Kepner 
Signed-off-by: David S. Miller

[IPV4]: make two functions static

2005-11-30T00:27:20+00:00

This patch makes two needlessly global functions static.

Signed-off-by: Adrian Bunk 
Signed-off-by: David S. Miller

[IPV4]: Fix ip_queue_xmit identity increment for TSO packets

2005-11-08T17:41:56+00:00

When ip_queue_xmit calls ip_select_ident_more for IP identity selection
it gives it the wrong packet count for TSO packets.  The ip_select_*
functions expect one less than the number of packets, so we need to
subtract one for TSO packets.

This bug was diagnosed and fixed by Tom Young.

Signed-off-by: Herbert Xu 
Signed-off-by: David S. Miller