Eric Dumazet 9cf7490360 tcp: do not drop syn_recv on all icmp reports ...

Petr Novopashenniy reported that ICMP redirects on SYN_RECV sockets
were leading to RST.

This is of course incorrect.

A specific list of ICMP messages should be able to drop a SYN_RECV.

For instance, a REDIRECT on SYN_RECV shall be ignored, as we do
not hold a dst per SYN_RECV pseudo request.

Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=111751
Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table")
Reported-by: Petr Novopashenniy <pety@rusnet.ru>
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2016-02-09 04:15:37 -05:00

..

ila

…

netfilter

netfilter: nf_tables: release objects on netns destruction

2015-12-28 18:34:35 +01:00

addrconf_core.c

…

addrconf.c

ipv6: addrconf: Fix recursive spin lock call

2016-02-06 03:08:15 -05:00

addrlabel.c

ipv6/addrlabel: fix ip6addrlbl_get()

2015-12-22 15:57:54 -05:00

af_inet6.c

…

ah6.c

…

anycast.c

…

datagram.c

ipv6/udp: use sticky pktinfo egress ifindex on connect()

2016-01-29 20:31:26 -08:00

esp6.c

…

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

…

fib6_rules.c

…

icmp.c

…

inet6_connection_sock.c

soreuseport: fast reuseport UDP socket selection

2016-01-04 22:49:58 -05:00

inet6_hashtables.c

…

ip6_checksum.c

…

ip6_fib.c

…

ip6_flowlabel.c

ipv6: fix a lockdep splat

2016-02-08 10:33:32 -05:00

ip6_gre.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-12-17 22:08:28 -05:00

ip6_icmp.c

…

ip6_input.c

…

ip6_offload.c

…

ip6_offload.h

…

ip6_output.c

ipv6: enforce flowi6_oif usage in ip6_dst_lookup_tail()

2016-01-29 20:31:26 -08:00

ip6_tunnel.c

…

ip6_udp_tunnel.c

…

ip6_vti.c

…

ip6mr.c

…

ipcomp6.c

…

ipv6_sockglue.c

…

Kconfig

ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV

2016-01-25 10:45:41 -08:00

Makefile

…

mcast_snoop.c

…

mcast.c

…

mip6.c

…

ndisc.c

ipv6: honor ifindex in case we receive ll addresses in router advertisements

2015-12-23 22:03:54 -05:00

netfilter.c

…

output_core.c

…

ping.c

…

proc.c

…

protocol.c

…

raw.c

ipv6: add IPV6_HDRINCL option for raw sockets

2015-12-17 15:12:28 -05:00

reassembly.c

inet: kill unused skb_free op

2016-01-05 22:25:57 -05:00

route.c

ipv6: enforce flowi6_oif usage in ip6_dst_lookup_tail()

2016-01-29 20:31:26 -08:00

sit.c

sit: set rtnl_link_ops before calling register_netdevice

2016-01-25 10:51:53 -08:00

syncookies.c

net: Allow accepted sockets to be bound to l3mdev domain

2015-12-18 14:43:38 -05:00

sysctl_net_ipv6.c

…

tcp_ipv6.c

tcp: do not drop syn_recv on all icmp reports

2016-02-09 04:15:37 -05:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

…

udp_offload.c

…

udp.c

udp: fix potential infinite loop in SO_REUSEPORT logic

2016-01-19 13:52:25 -05:00

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

…

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

ipv6: update skb->csum when CE mark is propagated

2016-01-15 15:07:23 -05:00

xfrm6_output.c

…

xfrm6_policy.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec

2015-12-22 16:26:31 -05:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…