Lorenzo Colitti
a36dbdb28e
net: ipv6: Fix oif in TCP SYN+ACK route lookup.
...
net-next commit 9c76a11 , ipv6: tcp_ipv6 policy route issue, had
a boolean logic error that caused incorrect behaviour for TCP
SYN+ACK when oif-based rules are in use. Specifically:
1. If a SYN comes in from a global address, and sk_bound_dev_if
is not set, the routing lookup has oif set to the interface
the SYN came in on. Instead, it should have oif unset,
because for global addresses, the incoming interface doesn't
necessarily have any bearing on the interface the SYN+ACK is
sent out on.
2. If a SYN comes in from a link-local address, and
sk_bound_dev_if is set, the routing lookup has oif set to the
interface the SYN came in on. Instead, it should have oif set
to sk_bound_dev_if, because that's what the application
requested.
Signed-off-by: Lorenzo Colitti <lorenzo@google.com>
Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2014-04-11 16:43:47 -04:00
..
netfilter
netfilter: Can't fail and free after table replacement
2014-04-05 17:46:22 +02:00
addrconf.c
ipv6: move DAD and addrconf_verify processing to workqueue
2014-03-28 16:54:50 -04:00
addrconf_core.c
addrlabel.c
ipv6:fix checkpatch errors with assignment in if condition
2014-02-17 16:57:29 -05:00
af_inet6.c
ipv6: add flowlabel_consistency sysctl
2014-01-19 17:12:31 -08:00
ah6.c
ah6: Use the IPsec protocol multiplexer API
2014-03-14 07:28:07 +01:00
anycast.c
ipv6: enable anycast addresses as source addresses for datagrams
2014-01-22 21:57:05 -08:00
datagram.c
ipv6: enable anycast addresses as source addresses for datagrams
2014-01-22 21:57:05 -08:00
esp6.c
esp6: Use the IPsec protocol multiplexer API
2014-03-14 07:28:07 +01:00
exthdrs.c
exthdrs_core.c
ipv6: ipv6_find_hdr restore prev functionality
2014-02-27 18:27:26 -05:00
exthdrs_offload.c
ipv6: Fix exthdrs offload registration.
2014-03-06 16:35:55 -05:00
fib6_rules.c
ipv6: move IPV6_TCLASS_SHIFT into ipv6.h and define a helper
2014-01-15 15:53:18 -08:00
icmp.c
ipv6: some ipv6 statistic counters failed to disable bh
2014-03-31 16:38:12 -04:00
inet6_connection_sock.c
net: Remove FLOWI_FLAG_CAN_SLEEP
2013-12-06 07:24:39 +01:00
inet6_hashtables.c
inet: convert inet_ehash_secret and ipv6_hash_secret to net_get_random_once
2013-10-19 19:45:35 -04:00
ip6_checksum.c
ipv6: log src and dst along with "udp checksum is 0"
2014-02-26 15:46:25 -05:00
ip6_fib.c
ipv6: fix checkpatch errors of "foo*" and "foo * bar"
2014-03-29 18:15:52 -04:00
ip6_flowlabel.c
ipv6: remove some unused include in flowlabel
2014-02-18 18:11:05 -05:00
ip6_gre.c
net: introduce netdev_alloc_pcpu_stats() for drivers
2014-02-14 15:49:55 -05:00
ip6_icmp.c
ip6_input.c
net: Fix memory leak if TPROXY used with TCP early demux
2014-01-27 16:22:11 -08:00
ip6_offload.c
ipv4: ipv6: better estimate tunnel header cut for correct ufo handling
2014-02-25 18:27:06 -05:00
ip6_offload.h
ip6_output.c
ipv6: some ipv6 statistic counters failed to disable bh
2014-03-31 16:38:12 -04:00
ip6_tunnel.c
net: Replace u64_stats_fetch_begin_bh to u64_stats_fetch_begin_irq
2014-03-14 22:41:36 -04:00
ip6_vti.c
vti6: Enable namespace changing
2014-03-14 07:28:09 +01:00
ip6mr.c
ip6mr: fix mfc notification flags
2014-03-20 16:24:28 -04:00
ipcomp6.c
ipcomp6: Use the IPsec protocol multiplexer API
2014-03-14 07:28:07 +01:00
ipv6_sockglue.c
ipv6: yet another new IPV6_MTU_DISCOVER option IPV6_PMTUDISC_OMIT
2014-02-26 15:51:01 -05:00
Kconfig
ip6_vti: Fix build when NET_IP_TUNNEL is not set.
2014-02-20 14:29:49 +01:00
Makefile
xfrm6: Add IPsec protocol multiplexer
2014-03-14 07:28:07 +01:00
mcast.c
ipv6: some ipv6 statistic counters failed to disable bh
2014-03-31 16:38:12 -04:00
mip6.c
ipv4/ipv6: Fix FSF address in file headers
2013-12-06 12:37:56 -05:00
ndisc.c
neigh: use tbl->family to distinguish ipv4 from ipv6
2013-12-09 20:56:12 -05:00
netfilter.c
output_core.c
ipv6: strengthen fallback fragmentation id generation
2014-03-31 16:33:38 -04:00
ping.c
ipv6: some ipv6 statistic counters failed to disable bh
2014-03-31 16:38:12 -04:00
proc.c
protocol.c
net: remove outdated comment for ipv4 and ipv6 protocol handler
2013-11-28 18:47:51 -05:00
raw.c
ipv6: protect protocols not handling ipv4 from v4 connection/bind attempts
2014-01-21 16:59:19 -08:00
reassembly.c
ipv6: split inet6_hash_frag for netfilter and initialize secrets with net_get_random_once
2013-10-23 17:01:40 -04:00
route.c
ipv6: reuse rt6_need_strict
2014-03-31 16:16:16 -04:00
sit.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2014-03-05 20:32:02 -05:00
syncookies.c
net: Remove FLOWI_FLAG_CAN_SLEEP
2013-12-06 07:24:39 +01:00
sysctl_net_ipv6.c
ipv6: add flowlabel_consistency sysctl
2014-01-19 17:12:31 -08:00
tcp_ipv6.c
net: ipv6: Fix oif in TCP SYN+ACK route lookup.
2014-04-11 16:43:47 -04:00
tcpv6_offload.c
net-gro: Prepare GRO stack for the upcoming tunneling support
2013-12-12 13:47:53 -05:00
tunnel6.c
ipv4/ipv6: Fix FSF address in file headers
2013-12-06 12:37:56 -05:00
udp.c
ipv6: make IPV6_RECVPKTINFO work for ipv4 datagrams
2014-01-19 19:53:18 -08:00
udp_impl.h
net: ipv4/ipv6: Remove extern from function prototypes
2013-10-19 19:12:11 -04:00
udp_offload.c
ipv6: reuse ip6_frag_id from ip6_ufo_append_data
2014-02-22 00:28:21 -05:00
udplite.c
xfrm6_input.c
xfrm6_mode_beet.c
xfrm6_mode_ro.c
ipv4/ipv6: Fix FSF address in file headers
2013-12-06 12:37:56 -05:00
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c
xfrm6: Remove xfrm_tunnel_notifier
2014-03-14 07:28:08 +01:00
xfrm6_output.c
xfrm6_policy.c
xfrm6: Add IPsec protocol multiplexer
2014-03-14 07:28:07 +01:00
xfrm6_protocol.c
xfrm6: Add IPsec protocol multiplexer
2014-03-14 07:28:07 +01:00
xfrm6_state.c
xfrm6_tunnel.c
ipv4/ipv6: Fix FSF address in file headers
2013-12-06 12:37:56 -05:00