Merge branch 'master' of git://1984.lsi.us.es/nf
Pablo Neira Ayuso says:
====================
The following batch contains Netfilter fixes for 3.8-rc1. They are
a mixture of old bugs that have passed unnoticed (I'll pass these to
stable) and more fresh ones from the previous merge window, they are:
* Fix for MAC address in 6in4 tunnels via NFLOG that results in ulogd
showing up wrong address, from Bob Hockney.
* Fix a comment in nf_conntrack_ipv6, from Florent Fourcot.
* Fix a leak an error path in ctnetlink while creating an expectation,
from Jesper Juhl.
* Fix missing ICMP time exceeded in the IPv6 defragmentation code, from
Haibo Xi.
* Fix inconsistent handling of routing changes in MASQUERADE for the
new connections case, from Andrew Collins.
* Fix a missing skb_reset_transport in ip[6]t_REJECT that leads to
crashes in the ixgbe driver (since it seems to access the transport
header with TSO enabled), from Mukund Jampala.
* Recover obsoleted NOTRACK target by including it into the CT and spot
a warning via printk about being obsoleted. Many people don't check the
scheduled to be removal file under Documentation, so we follow some
less agressive approach to kill this in a year or so. Spotted by Florian
Westphal, patch from myself.
* Fix race condition in xt_hashlimit that allows to create two or more
entries, from myself.
* Fix crash if the CT is used due to the recently added facilities to
consult the dying and unconfirmed conntrack lists, from myself.
====================
Signed-off-by:
David S. Miller <davem@davemloft.net>
No related branches found
No related tags found
Showing
- include/net/netns/conntrack.h 1 addition, 0 deletionsinclude/net/netns/conntrack.h
- include/net/netns/x_tables.h 1 addition, 0 deletionsinclude/net/netns/x_tables.h
- net/ipv4/netfilter/ipt_REJECT.c 1 addition, 0 deletionsnet/ipv4/netfilter/ipt_REJECT.c
- net/ipv4/netfilter/iptable_nat.c 10 additions, 5 deletionsnet/ipv4/netfilter/iptable_nat.c
- net/ipv6/netfilter/ip6t_REJECT.c 1 addition, 0 deletionsnet/ipv6/netfilter/ip6t_REJECT.c
- net/ipv6/netfilter/ip6table_nat.c 10 additions, 5 deletionsnet/ipv6/netfilter/ip6table_nat.c
- net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c 2 additions, 2 deletionsnet/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c
- net/ipv6/netfilter/nf_conntrack_reasm.c 4 additions, 1 deletionnet/ipv6/netfilter/nf_conntrack_reasm.c
- net/netfilter/Kconfig 4 additions, 0 deletionsnet/netfilter/Kconfig
- net/netfilter/nf_conntrack_core.c 2 additions, 0 deletionsnet/netfilter/nf_conntrack_core.c
- net/netfilter/nf_conntrack_netlink.c 1 addition, 1 deletionnet/netfilter/nf_conntrack_netlink.c
- net/netfilter/nfnetlink_log.c 13 additions, 3 deletionsnet/netfilter/nfnetlink_log.c
- net/netfilter/xt_CT.c 57 additions, 1 deletionnet/netfilter/xt_CT.c
- net/netfilter/xt_hashlimit.c 46 additions, 8 deletionsnet/netfilter/xt_hashlimit.c
- net/netfilter/xt_recent.c 16 additions, 4 deletionsnet/netfilter/xt_recent.c
Please register or sign in to comment