Hannes Frederic Sowa
787d7ac308
udp: restrict offloads to one namespace ...
udp tunnel offloads tend to aggregate datagrams based on inner
headers. gro engine gets notified by tunnel implementations about
possible offloads. The match is solely based on the port number.
Imagine a tunnel bound to port 53, the offloading will look into all
DNS packets and tries to aggregate them based on the inner data found
within. This could lead to data corruption and malformed DNS packets.
While this patch minimizes the problem and helps an administrator to find
the issue by querying ip tunnel/fou, a better way would be to match on
the specific destination ip address so if a user space socket is bound
to the same address it will conflict.
Cc: Tom Herbert <tom@herbertland.com>
Cc: Eric Dumazet <edumazet@google.com>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2016-01-10 17:28:24 -05:00
6lowpan: put mcast compression in an own function
2015-10-21 00:49:25 +02:00
IB/cma: Add support for network namespaces
2015-10-28 12:32:48 -04:00
vlan: Do not put vlan headers back on bridge and macvlan ports
2015-11-17 14:38:35 -05:00
net: add validation for the socket syscall protocol argument
2015-12-14 16:09:30 -05:00
batman-adv: Fix invalid read while copying bat_iv.bcast_own
2016-01-07 14:24:05 +08:00
bluetooth: Validate socket address length in sco_sock_bind().
2015-12-15 15:39:08 -05:00
bridge: Only call /sbin/bridge-stp for the initial network namespace
2016-01-05 16:46:17 -05:00
net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA
2015-12-01 15:45:05 -05:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client
2015-11-13 09:24:40 -08:00
net: possible use after free in dst_release
2016-01-06 15:00:27 -05:00
ipv6: kill sk_dst_lock
2015-12-03 11:32:06 -05:00
net: add validation for the socket syscall protocol argument
2015-12-14 16:09:30 -05:00
net: dns_resolver: convert time_t to time64_t
2015-11-18 16:27:46 -05:00
net: dsa: use switchdev obj for VLAN add/del ops
2015-11-01 15:56:11 -05:00
net/hsr: fix a warning message
2015-11-23 14:56:15 -05:00
net: fix percpu memory leaks
2015-11-02 22:47:14 -05:00
udp: restrict offloads to one namespace
2016-01-10 17:28:24 -05:00
ipv6: honor ifindex in case we receive ll addresses in router advertisements
2015-12-23 22:03:54 -05:00
net: add validation for the socket syscall protocol argument
2015-12-14 16:09:30 -05:00
net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA
2015-12-01 15:45:05 -05:00
af_key: fix two typos
2015-10-23 03:05:19 -07:00
ipv6: add complete rcu protection around np->opt
2015-12-02 23:37:16 -05:00
mac80211: handle width changes from opmode notification IE in beacon
2015-12-15 13:16:47 +01:00
mac802154: llsec: use kzfree
2015-10-21 00:49:24 +02:00
mpls: make via address optional for multipath routes
2015-12-12 00:43:44 -05:00
netfilter: nft_ct: include direction when dumping NFT_CT_L3PROTOCOL key
2015-12-18 14:45:45 +01:00
mm, page_alloc: distinguish between being unable to sleep, unwilling to sleep and avoiding waking kswapd
2015-11-06 17:50:42 -08:00
net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA
2015-12-01 15:45:05 -05:00
openvswitch: Fix template leak in error cases.
2015-12-29 15:27:52 -05:00
packet: Allow packets with only a header (but no payload)
2015-11-29 22:17:17 -05:00
RDS: fix race condition when sending a message on unbound socket
2015-11-24 17:20:09 -05:00
rfkill: copy the name into the rfkill struct
2015-12-10 10:37:51 +01:00
net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA
2015-12-01 15:45:05 -05:00
net: sched: fix missing free per cpu on qstats
2016-01-06 01:40:21 -05:00
sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close
2015-12-30 16:57:16 -05:00
sched/wait: Fix the signal handling fix
2015-12-13 14:30:59 -08:00
switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion
2015-11-03 13:39:21 -05:00
tipc: fix error handling of expanding buffer headroom
2015-11-24 11:26:19 -05:00
af_unix: Fix splice-bind deadlock
2016-01-04 23:22:49 -05:00
VSOCK: call sk->sk_data_ready() on accept()
2015-11-04 22:03:10 -05:00
nl80211: Fix potential memory leak in nl80211_connect
2015-12-15 13:11:26 +01:00
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
2015-12-22 16:26:31 -05:00
net, socket, socket_wq: fix missing initialization of flags
2015-12-30 16:38:01 -05:00
net: sysctl: fix a kmemleak warning
2015-10-23 06:22:08 -07:00
787d7ac308