linux.git/net/netfilter, branch v2.6.19

[NETFILTER]: conntrack: fix refcount leak when finding expectation

2006-11-29T04:59:37+00:00

All users of __{ip,nf}_conntrack_expect_find() don't expect that
it increments the reference count of expectation.

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: ctnetlink: fix reference count leak

2006-11-29T04:59:36+00:00

When NFA_NEST exceeds the skb size the protocol reference is leaked.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack: fix the race on assign helper to new conntrack

2006-11-29T04:59:35+00:00

The found helper cannot be assigned to conntrack after unlocking
nf_conntrack_lock. This tries to find helper to assign again.

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nfctnetlink: assign helper to newly created conntrack

2006-11-29T04:59:34+00:00

This fixes the bug which doesn't assign helper to newly created
conntrack via nf_conntrack_netlink.

Signed-off-by: Yasuyuki Kozakai 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Use pskb_trim in {ip,ip6,nfnetlink}_queue

2006-11-16T05:18:48+00:00

Based on patch by James D. Nurmi:

I've got some code very dependant on nfnetlink_queue, and turned up a
large number of warns coming from skb_trim.  While it's quite possibly
my code, having not seen it on older kernels made me a bit suspect.

Anyhow, based on some googling I turned up this thread:
http://lkml.org/lkml/2006/8/13/56

And believe the issue to be related, so attached is a small patch to
the kernel -- not sure if this is completely correct, but for anyone
else hitting the WARN_ON(1) in skbuff.h, it might be helpful..

Signed-off-by: James D. Nurmi 

Ported to ip6_queue and nfnetlink_queue and added return value
checks.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink_log: fix byteorder of NFULA_SEQ_GLOBAL

2006-11-16T05:18:47+00:00

NFULA_SEQ_GLOBAL should be in network byteorder.

Spotted by Al Viro.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER] bug: skb->protocol is already net-endian

2006-11-05T22:11:29+00:00

htons() is not needed (and no, it's not misspelled ntohs() -
userland expects net-endian here).

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NETFILTER] bug: nfulnl_msg_config_mode ->copy_range is 32bit

2006-11-05T22:11:28+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NETFILTER] bug: NFULA_CFG_QTHRESH uses 32bit

2006-11-05T22:11:27+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack: add missing unlock in get_next_corpse()

2006-10-30T23:24:46+00:00

Add missing unlock in get_next_corpse() in nf_conntrack. It was missed
during the removal of listhelp.h . Also remove an unneeded use of
nf_ct_tuplehash_to_ctrack() in the same function.

Should be applied before 2.6.19 is released.

Signed-off-by: Martin Josefsson 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller