Hannes Frederic Sowa
787d7ac308
udp: restrict offloads to one namespace ...
udp tunnel offloads tend to aggregate datagrams based on inner
headers. gro engine gets notified by tunnel implementations about
possible offloads. The match is solely based on the port number.
Imagine a tunnel bound to port 53, the offloading will look into all
DNS packets and tries to aggregate them based on the inner data found
within. This could lead to data corruption and malformed DNS packets.
While this patch minimizes the problem and helps an administrator to find
the issue by querying ip tunnel/fou, a better way would be to match on
the specific destination ip address so if a user space socket is bound
to the same address it will conflict.
Cc: Tom Herbert <tom@herbertland.com>
Cc: Eric Dumazet <edumazet@google.com>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-01-10 17:28:24 -05:00
9p: switch p9_client_read() to passing struct iov_iter *
2015-04-11 22:28:27 -04:00
Bluetooth: L2CAP: Fix returning correct LE CoC response codes
2015-11-05 04:04:00 +01:00
caif: fix a signedness bug in cfpkt_iterate()
2015-02-20 17:35:14 -05:00
s390/iucv: do not use arrays as argument
2015-09-21 16:03:04 -07:00
netfilter: nf_tables: add clone interface to expression operations
2015-11-10 23:47:32 +01:00
Revert "ipv4/icmp: redirect messages can use the ingress daddr as source"
2015-10-14 06:01:07 -07:00
NFC: nci: non-static functions can not be inline
2015-10-28 06:44:45 +01:00
sctp: start t5 timer only when peer rwnd is 0 and local state is SHUTDOWN_PENDING
2015-12-06 22:31:51 -05:00
act_connmark: Remember the struct net instead of guessing it.
2015-09-18 21:59:31 +02:00
6lowpan: remove lowpan_is_addr_broadcast
2015-10-21 00:49:25 +02:00
net_sched: make tcf_hash_destroy() static
2015-08-26 11:01:44 -07:00
ipv6: remove unused neigh parameter from ndisc functions
2015-09-24 12:26:08 -07:00
ieee802154: af_ieee802154: fix typo in comment.
2015-09-17 13:20:05 +02:00
unix: avoid use-after-free in ep_remove_wait_queue
2015-11-23 12:29:58 -05:00
VSOCK: define VSOCK_SS_LISTEN once only
2015-11-01 12:14:47 -05:00
neigh: Factor out ___neigh_lookup_noref
2015-03-04 00:23:23 -05:00
ax25: Stop using sock->sk_protinfo.
2015-06-28 16:55:44 -07:00
bonding: simplify / unify event handling code for 3ad mode.
2015-11-02 22:52:24 -05:00
bonding: convert num_grat_arp to the new bonding option API
2015-07-27 01:05:24 -07:00
net/bonding: Export bond_option_active_slave_get_rcu
2015-08-30 18:08:50 -04:00
cfg80211/mac80211: clarify RSSI CQM reporting requirements
2015-11-03 10:54:58 +01:00
nl802154: add support for security layer
2015-09-30 13:16:44 +02:00
net: Add inet_proto_csum_replace_by_diff utility function
2015-08-17 21:33:06 -07:00
cipso: don't use IPCB() to locate the CIPSO IP option
2015-02-11 14:46:37 -05:00
cls_cgroup: factor out classid retrieval
2015-07-20 12:41:30 -07:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-05-13 14:31:43 -04:00
net: switch importing msghdr from userland to {compat_,}import_iovec()
2015-04-09 00:02:26 -04:00
net/dcb: Add IEEE QCN attribute
2015-03-06 21:50:02 -05:00
netfilter: Pass net into okfn
2015-09-17 17:18:37 -07:00
net: dsa: use switchdev obj for VLAN add/del ops
2015-11-01 15:56:11 -05:00
net: fix IP early demux races
2015-12-14 23:52:00 -05:00
tun_dst: Fix potential NULL dereference
2015-11-04 21:59:22 -05:00
ipv4, ipv6: Pass net into __ip_local_out and __ip6_local_out
2015-10-08 04:27:02 -07:00
net/ethoc: support big-endian register layout
2015-09-23 15:33:15 -07:00
net: ipv6: use common fib_default_rule_pref
2015-09-09 14:19:50 -07:00
net: Rename FLOWI_FLAG_VRFSRC to FLOWI_FLAG_L3MDEV_SRC
2015-10-07 04:27:42 -07:00
flow_dissector: Don't use bit fields.
2015-09-01 16:46:08 -07:00
genetlink: simplify genl_notify
2015-09-24 12:25:23 -07:00
geneve: Consolidate Geneve functionality in single module.
2015-08-27 15:42:48 -07:00
gre: Remove support for sharing GRE protocol hook.
2015-08-10 14:03:54 -07:00
gro_cells: remove spinlock protecting receive queues
2015-08-31 15:17:17 -07:00
nl802154: add support for security layer
2015-09-30 13:16:44 +02:00
ipv6: do retries on stable privacy addresses
2015-03-23 22:12:09 -04:00
ipv6: remove obsolete inet6 functions
2015-10-03 04:32:42 -07:00
ipv6: get rid of __inet6_hash()
2015-03-18 22:00:35 -04:00
net: avoid NULL deref in inet_ctl_sock_destroy()
2015-11-02 22:46:09 -05:00
tcp/dccp: fix hashdance race for passive sessions
2015-10-23 05:42:21 -07:00
net: fix percpu memory leaks
2015-11-02 22:47:14 -05:00
tcp/dccp: fix hashdance race for passive sessions
2015-10-23 05:42:21 -07:00
xfrm: take care of request sockets
2015-12-07 17:07:33 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-10-20 06:08:27 -07:00
inet: tcp: fix inetpeer_set_addr_v4()
2015-12-16 00:14:12 -05:00
ipv4: Pass struct net into ip_defrag and ip_check_defrag
2015-10-12 19:44:16 -07:00
ipv6: Check rt->dst.from for the DST_NOCACHE route
2015-11-15 17:12:37 -05:00
ipv6: kill sk_dst_lock
2015-12-03 11:32:06 -05:00
ip_tunnel: disable preemption when updating per-cpu tstats
2015-11-16 14:14:32 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2015-11-03 13:41:45 -05:00
ip_tunnel: disable preemption when updating per-cpu tstats
2015-11-16 14:14:32 -05:00
ipvs: Remove skb_sknet
2015-09-24 09:34:43 +09:00
ipv6: add complete rcu protection around np->opt
2015-12-02 23:37:16 -05:00
wext: add checked wrappers for adding events/points to streams
2015-02-28 21:31:12 +01:00
net: Propagate lookup failure in l3mdev_get_saddr to caller
2016-01-04 22:58:30 -05:00
net: Pass kern from net_proto_family.create to sk_alloc
2015-05-11 10:50:17 -04:00
dst: Pass net into dst->output
2015-10-08 04:27:03 -07:00
mac80211: always set the buf_size in AddBA req to 64
2015-11-20 11:39:40 +01:00
6lowpan: cleanup lowpan_header_decompress
2015-10-21 00:49:24 +02:00
mpls: multipath route support
2015-10-23 06:26:42 -07:00
Revert "ipv6: ndisc: inherit metadata dst when creating ndisc requests"
2015-12-01 15:07:59 -05:00
net: add explicit logging and stat for neighbour table overflow
2015-08-10 13:46:21 -07:00
netfilter: nfacct: per network namespace support
2015-08-07 11:50:56 +02:00
netlink: add nla_get for le32 and le64
2015-09-30 13:16:44 +02:00
nl802154: add support for security layer
2015-09-30 13:16:44 +02:00
net: Remove iocb argument from sendmsg and recvmsg
2015-03-02 13:06:31 -05:00
net: sched: consolidate tc_classify{,_compat}
2015-08-27 14:18:48 -07:00
udp: restrict offloads to one namespace
2016-01-10 17:28:24 -05:00
tcp/dccp: fix race at listener dismantle phase
2015-10-16 00:52:19 -07:00
net: Propagate lookup failure in l3mdev_get_saddr to caller
2016-01-04 22:58:30 -05:00
netlink: Rightsize IFLA_AF_SPEC size calculation
2015-10-21 19:15:20 -07:00
net_sched: fix qdisc_tree_decrease_qlen() races
2015-12-03 14:59:05 -05:00
net: fix warnings in 'make htmldocs' by moving macro definition out of field declaration
2015-12-16 11:44:17 -05:00
net: switchdev: fix return code of fdb_dump stub
2015-11-16 15:24:37 -05:00
tcp/dccp: fix hashdance race for passive sessions
2015-10-23 05:42:21 -07:00
inet: add TCP_NEW_SYN_RECV state
2015-03-12 22:58:12 -04:00
inet: remove BUG_ON() in twsk_destructor()
2015-07-09 15:12:20 -07:00
net: tso: add support for IPv6
2015-10-26 22:24:22 -07:00
net: Remove iocb argument from sendmsg and recvmsg
2015-03-02 13:06:31 -05:00
vxlan: do not receive IPv4 packets on IPv6 socket
2015-08-29 13:07:54 -07:00
net: switch memcpy_fromiovec()/memcpy_fromiovecend() users to copy_from_iter()
2015-02-04 01:34:15 -05:00
vxlan: fix incorrect RCO bit in VXLAN header
2015-12-05 18:15:29 -05:00
xfrm: add rcu protection to sk->sk_policy[]
2015-12-11 19:22:06 -05:00
787d7ac308