Herbert Xu
732c8bd590
[IPSEC]: Fix BEET output ...
The IPv6 BEET output function is incorrectly including the inner
header in the payload to be protected. This causes a crash as
the packet doesn't actually have that many bytes for a second
header.
The IPv4 BEET output on the other hand is broken when it comes
to handling an inner IPv6 header since it always assumes an
inner IPv4 header.
This patch fixes both by making sure that neither BEET output
function touches the inner header at all. All access is now
done through the protocol-independent cb structure. Two new
attributes are added to make this work, the IP header length
and the IPv4 option length. They're filled in by the inner
mode's output function.
Thanks to Joakim Koskela for finding this problem.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-03-26 16:51:09 -07:00
ipvs: Make wrr "no available servers" error message rate-limited
2008-02-05 20:00:10 -08:00
[NETFILTER]: ipt_recent: sanity check hit count
2008-03-20 15:07:10 -07:00
[NET] endianness noise: INADDR_ANY
2008-03-17 22:44:53 -07:00
[IPSEC]: Fix bogus usage of u64 on input sequence number
2008-02-12 22:50:35 -08:00
Revert "[NDISC]: Fix race in generic address resolution"
2008-02-17 18:39:54 -08:00
NetLabel: introduce a new kernel configuration API for NetLabel
2008-02-05 09:44:20 -08:00
[IPV4] net/ipv4: Use ipv4_is_<type>
2008-01-28 14:58:15 -08:00
[IPV4]: Reset scope when changing address
2008-02-26 18:42:41 -08:00
[IPV4]: esp_output() misannotations
2008-03-17 22:50:23 -07:00
[NETNS]: Lookup in FIB semantic hashes taking into account the namespace.
2008-01-31 19:28:41 -08:00
ipv4/fib_hash.c: fix NULL dereference
2008-02-19 16:28:54 -08:00
[IPV4] FIB_HASH: Reduce memory needs and speedup lookups
2008-01-28 15:02:46 -08:00
[IPV4]: Consolidate fib_select_default.
2008-01-28 15:11:02 -08:00
[NETNS]: Lookup in FIB semantic hashes taking into account the namespace.
2008-01-31 19:28:41 -08:00
[IPV4] fib_trie: fix warning from rcu_assign_poinger
2008-03-22 17:59:58 -07:00
[ICMP]: Dst entry leak in icmp_send host re-lookup code (v2).
2008-03-26 02:27:09 -07:00
[IGMP]: Optimize kfree_skb in igmp_rcv.
2008-02-09 23:22:26 -08:00
[SOCK] proto: Add hashinfo member to struct proto
2008-02-03 04:28:52 -08:00
[NETNS]: Tcp-v6 sockets per-net lookup.
2008-01-31 19:28:20 -08:00
[NETNS][FRAGS]: Make the pernet subsystem for fragments.
2008-01-28 15:10:40 -08:00
[INET]: Unexport inet_listen_wlock
2008-02-13 17:40:25 -08:00
[NET]: prot_inuse cleanups and optimizations
2008-01-28 15:00:36 -08:00
[IPV4]: Fix null dereference in ip_defrag
2008-03-21 15:01:50 -07:00
[INET]: Don't create tunnels with '%' in name.
2008-02-26 23:51:04 -08:00
[NETNS]: Add netns parameter to inet_(dev_)add_type.
2008-01-28 15:01:27 -08:00
[NET]: Introducing socket mark socket option.
2008-01-31 19:27:19 -08:00
[NET] endianness noise: INADDR_ANY
2008-03-17 22:44:53 -07:00
[IPCOMP]: Disable BH on output when using shared tfm
2008-02-28 11:23:17 -08:00
[NET] endianness noise: INADDR_ANY
2008-03-17 22:44:53 -07:00
[INET]: Don't create tunnels with '%' in name.
2008-02-26 23:51:04 -08:00
[NETNS]: Add namespace parameter to ip_route_output_key.
2008-01-28 15:11:07 -08:00
[ESP]: Add select on AUTHENC
2008-03-04 14:29:21 -08:00
[IPV4]: Cleanup the sysctl_net_ipv4.c file
2008-01-28 14:56:27 -08:00
[NETNS]: Add namespace parameter to ip_route_output_key.
2008-01-28 15:11:07 -08:00
[NETNS][FRAGS]: Make the mem counter per-namespace.
2008-01-28 15:10:36 -08:00
[RAW]: Wrong content of the /proc/net/raw6.
2008-01-31 19:27:26 -08:00
[IPV4]: Use proc_create() to setup ->proc_fops first
2008-02-28 14:14:25 -08:00
[NETNS]: Add namespace parameter to ip_route_output_key.
2008-01-28 15:11:07 -08:00
[TCP]: Fix a bug in strategy_allowed_congestion_control
2008-01-31 19:28:23 -08:00
[TCP]: Let skbs grow over a page on fast peers
2008-03-22 15:47:05 -07:00
[TCP]: BIC web page link is corrected.
2008-02-28 22:14:32 -08:00
[TCP]: Uninline tcp_is_cwnd_limited
2008-01-28 15:01:48 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Must count fack_count also when skipping
2008-03-03 12:10:16 -08:00
[TCP]: Fix tcp_v4_send_synack() comment
2008-02-17 22:29:19 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Fix shrinking windows with window scaling
2008-03-20 16:11:27 -07:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Do not purge sk_forward_alloc entirely in tcp_delack_timer().
2008-01-28 15:01:42 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[TCP]: Cong.ctrl modules: remove unused good_ack from cong_avoid
2008-01-28 14:55:41 -08:00
[NETNS]: Udp sockets per-net lookup.
2008-01-31 19:28:21 -08:00
[IPV4] UDP,UDPLITE: Sparse: {__udp4_lib,udp,udplite}_err() are of void.
2008-01-28 15:10:24 -08:00
[IPSEC]: Fix transport-mode async resume on intput without netfilter
2008-01-28 15:00:10 -08:00
[IPSEC]: Fix BEET output
2008-03-26 16:51:09 -07:00
[IPSEC]: Fix inter address family IPsec tunnel handling.
2008-03-24 14:51:51 -07:00
[IPSEC]: Fix inter address family IPsec tunnel handling.
2008-03-24 14:51:51 -07:00
[NET]: should explicitely initialize atomic_t field in struct dst_ops
2008-01-31 19:27:23 -08:00
[IPSEC]: Fix BEET output
2008-03-26 16:51:09 -07:00
[IPCOMP]: Fix reception of incompressible packets
2008-01-31 19:27:24 -08:00
732c8bd590