Herbert Xu 7233b9f33e [IPSEC]: Fix reversed ICMP6 policy check ...

The policy check I added for ICMP on IPv6 is reversed.  This
patch fixes that.

It also adds an skb->sp check so that unprotected packets that
fail the policy check do not crash the machine.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-01-28 14:57:41 -08:00

..

netfilter

[NETFILTER]: {nfnetlink,ip,ip6}_queue: kill issue_verdict

2008-01-28 14:56:15 -08:00

addrconf_core.c

…

addrconf.c

[NET]: Remove unused "mibalign" argument for snmp_mib_init().

2008-01-28 14:57:02 -08:00

addrlabel.c

[NET]: Make rtnetlink infrastructure network namespace aware (v3)

2008-01-28 14:54:25 -08:00

af_inet6.c

[IPV6]: make the protocol initialization to return an error code

2008-01-28 14:57:13 -08:00

ah6.c

[IPSEC]: Move state lock into x->type->input

2008-01-28 14:53:52 -08:00

anycast.c

…

datagram.c

…

esp6.c

[IPSEC]: Move state lock into x->type->input

2008-01-28 14:53:52 -08:00

exthdrs_core.c

…

exthdrs.c

[IPV6]: make extended headers to return an error at initialization

2008-01-28 14:57:10 -08:00

fib6_rules.c

[IPV6]: Make fib6_rules_init to return an error code.

2008-01-28 14:56:46 -08:00

icmp.c

[IPSEC]: Fix reversed ICMP6 policy check

2008-01-28 14:57:41 -08:00

inet6_connection_sock.c

…

inet6_hashtables.c

…

ip6_fib.c

[IPV6] route6/fib6: Don't panic a kmem_cache_create.

2008-01-28 14:56:48 -08:00

ip6_flowlabel.c

[IPV6]: make flowlabel to return an error

2008-01-28 14:57:10 -08:00

ip6_input.c

[IPv6] RAW: Compact the API for the kernel

2008-01-28 14:54:29 -08:00

ip6_output.c

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28 14:53:55 -08:00

ip6_tunnel.c

[IPV6]: Add ip6_local_out

2008-01-28 14:53:47 -08:00

ipcomp6.c

[IPSEC]: Forbid BEET + ipcomp for now

2008-01-28 14:53:43 -08:00

ipv6_sockglue.c

[IPV6]: make the protocol initialization to return an error code

2008-01-28 14:57:13 -08:00

Kconfig

…

Makefile

[IPV6]: Make the ipv6/sysctl_net_ipv6.c compilation cleaner

2008-01-28 14:56:29 -08:00

mcast.c

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28 14:53:55 -08:00

mip6.c

[IPSEC]: Move state lock into x->type->input

2008-01-28 14:53:52 -08:00

ndisc.c

[NET]: Make rtnetlink infrastructure network namespace aware (v3)

2008-01-28 14:54:25 -08:00

netfilter.c

[NETFILTER]: nf_queue: move list_head/skb/id to struct nf_info

2008-01-28 14:56:14 -08:00

proc.c

[UDP]: Restore missing inDatagrams increments

2008-01-28 14:56:33 -08:00

protocol.c

…

raw.c

[IPV6]: make the protocol initialization to return an error code

2008-01-28 14:57:13 -08:00

reassembly.c

[IPV6]: make frag to return an error at initialization

2008-01-28 14:57:11 -08:00

route.c

[IPV6]: route6 remove ifdef for fib_rules

2008-01-28 14:56:59 -08:00

sit.c

[IPV6]: Add RFC4214 support

2008-01-28 14:55:09 -08:00

sysctl_net_ipv6.c

[IPV6]: Use sysctl paths to register ipv6 sysctl tables

2008-01-28 14:56:30 -08:00

tcp_ipv6.c

[IPV6]: make the protocol initialization to return an error code

2008-01-28 14:57:13 -08:00

tunnel6.c

…

udp_impl.h

…

udp.c

[IPV6]: make the protocol initialization to return an error code

2008-01-28 14:57:13 -08:00

udplite.c

[IPV6]: make the protocol initialization to return an error code

2008-01-28 14:57:13 -08:00

xfrm6_input.c

[IPSEC]: Use the correct family for input state lookup

2008-01-28 14:55:49 -08:00

xfrm6_mode_beet.c

[IPSEC]: Separate inner/outer mode processing on input

2008-01-28 14:53:46 -08:00

xfrm6_mode_ro.c

[IPSEC]: Make x->lastused an unsigned long

2008-01-28 14:53:52 -08:00

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

[IPSEC]: Separate inner/outer mode processing on input

2008-01-28 14:53:46 -08:00

xfrm6_output.c

[NETFILTER]: Introduce NF_INET_ hook values

2008-01-28 14:53:55 -08:00

xfrm6_policy.c

[IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse

2008-01-28 14:57:22 -08:00

xfrm6_state.c

[IPV6]: Make xfrm6_init to return an error code.

2008-01-28 14:56:45 -08:00

xfrm6_tunnel.c

…