Balazs Scheidler c49b9f295e tproxy: fixe a possible read from an invalid location in the socket match ...

TIME_WAIT sockets need to be handled specially, and the socket match
casted inet_timewait_sock instances to inet_sock, which are not
compatible.

Handle this special case by checking sk->sk_state.

Signed-off-by: Balazs Scheidler <bazsi@balabit.hu>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-12-07 23:53:46 -08:00

..

ipvs

netfilter: payload_len is be16, add size of struct rather than size of pointer

2008-11-10 16:46:06 -08:00

core.c

…

Kconfig

netfilter: ctnetlink: remove obsolete NAT dependency from Kconfig

2008-10-20 03:31:17 -07:00

Makefile

Merge branch 'lvs-next-2.6' of git://git.kernel.org/pub/scm/linux/kernel/git/horms/lvs-2.6

2008-10-08 14:26:36 -07:00

nf_conntrack_acct.c

fix random typos

2008-10-16 11:21:30 -07:00

nf_conntrack_amanda.c

…

nf_conntrack_core.c

netfilter: ctnetlink: fix conntrack creation race

2008-11-24 15:56:17 -08:00

nf_conntrack_ecache.c

…

nf_conntrack_expect.c

…

nf_conntrack_extend.c

…

nf_conntrack_ftp.c

…

nf_conntrack_h323_asn1.c

…

nf_conntrack_h323_main.c

…

nf_conntrack_h323_types.c

…

nf_conntrack_helper.c

netfilter: netns ct: walk netns list under RTNL

2008-11-05 03:03:18 -08:00

nf_conntrack_irc.c

…

nf_conntrack_l3proto_generic.c

…

nf_conntrack_netbios_ns.c

…

nf_conntrack_netlink.c

netfilter: ctnetlink: fix GFP_KERNEL allocation under spinlock

2008-11-26 03:57:44 -08:00

nf_conntrack_pptp.c

driver core: basic infrastructure for per-module dynamic debug messages

2008-10-16 09:24:47 -07:00

nf_conntrack_proto_dccp.c

…

nf_conntrack_proto_generic.c

…

nf_conntrack_proto_gre.c

netfilter: nf_conntrack_proto_gre: switch to register_pernet_gen_subsys()

2008-10-30 23:55:44 -07:00

nf_conntrack_proto_sctp.c

…

nf_conntrack_proto_tcp.c

…

nf_conntrack_proto_udp.c

…

nf_conntrack_proto_udplite.c

…

nf_conntrack_proto.c

netfilter: netns ct: walk netns list under RTNL

2008-11-05 03:03:18 -08:00

nf_conntrack_sane.c

…

nf_conntrack_sip.c

…

nf_conntrack_standalone.c

…

nf_conntrack_tftp.c

…

nf_internals.h

…

nf_log.c

…

nf_queue.c

…

nf_sockopt.c

…

nf_tproxy_core.c

netfilter: remove unused #include <version.h>

2008-10-12 21:08:34 -07:00

nfnetlink_log.c

…

nfnetlink_queue.c

…

nfnetlink.c

net: Remove CONFIG_KMOD from net/ (towards removing CONFIG_KMOD entirely)

2008-10-16 15:24:51 -07:00

x_tables.c

netfilter: xtables: provide invoked family value to extensions

2008-10-08 11:35:20 +02:00

xt_CLASSIFY.c

netfilter: xtables: move extension arguments into compound structure (4/6)

2008-10-08 11:35:19 +02:00

xt_comment.c

netfilter: xtables: use NFPROTO_UNSPEC in more extensions

2008-10-08 11:35:20 +02:00

xt_connbytes.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_connlimit.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_connmark.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_CONNMARK.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_CONNSECMARK.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_conntrack.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_dccp.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_dscp.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_DSCP.c

netfilter: xtables: move extension arguments into compound structure (5/6)

2008-10-08 11:35:19 +02:00

xt_esp.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_hashlimit.c

netfilter: xtables: move extension arguments into compound structure (3/6)

2008-10-08 11:35:19 +02:00

xt_helper.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_iprange.c

netfilter: xt_iprange: fix range inversion match

2008-10-20 03:32:21 -07:00

xt_length.c

netfilter: xtables: move extension arguments into compound structure (1/6)

2008-10-08 11:35:18 +02:00

xt_limit.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_mac.c

netfilter: xtables: use NFPROTO_UNSPEC in more extensions

2008-10-08 11:35:20 +02:00

xt_mark.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_MARK.c

netfilter: xtables: use NFPROTO_UNSPEC in more extensions

2008-10-08 11:35:20 +02:00

xt_multiport.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_NFLOG.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_NFQUEUE.c

netfilter: replace old NF_ARP calls with NFPROTO_ARP

2008-10-20 03:34:51 -07:00

xt_NOTRACK.c

netfilter: xtables: use NFPROTO_UNSPEC in more extensions

2008-10-08 11:35:20 +02:00

xt_owner.c

netfilter: xtables: use NFPROTO_UNSPEC in more extensions

2008-10-08 11:35:20 +02:00

xt_physdev.c

netfilter: xtables: use NFPROTO_UNSPEC in more extensions

2008-10-08 11:35:20 +02:00

xt_pkttype.c

netfilter: xtables: cut down on static data for family-independent extensions

2008-10-08 11:35:20 +02:00

xt_policy.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_quota.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_rateest.c

netfilter: xtables: move extension arguments into compound structure (3/6)

2008-10-08 11:35:19 +02:00

xt_RATEEST.c

netfilter: xtables: move extension arguments into compound structure (6/6)

2008-10-08 11:35:19 +02:00

xt_realm.c

netfilter: xtables: use NFPROTO_UNSPEC in more extensions

2008-10-08 11:35:20 +02:00

xt_recent.c

netfilter: xt_recent: use proc_create_data()

2008-10-20 03:33:49 -07:00

xt_sctp.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_SECMARK.c

netfilter: xtables: move extension arguments into compound structure (6/6)

2008-10-08 11:35:19 +02:00

xt_socket.c

tproxy: fixe a possible read from an invalid location in the socket match

2008-12-07 23:53:46 -08:00

xt_state.c

netfilter: xtables: move extension arguments into compound structure (3/6)

2008-10-08 11:35:19 +02:00

xt_statistic.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_string.c

netfilter: xtables: move extension arguments into compound structure (3/6)

2008-10-08 11:35:19 +02:00

xt_tcpmss.c

netfilter: xtables: move extension arguments into compound structure (1/6)

2008-10-08 11:35:18 +02:00

xt_TCPMSS.c

netfilter: xtables: move extension arguments into compound structure (5/6)

2008-10-08 11:35:19 +02:00

xt_TCPOPTSTRIP.c

netfilter: xtables: move extension arguments into compound structure (4/6)

2008-10-08 11:35:19 +02:00

xt_tcpudp.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_time.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

xt_TPROXY.c

netfilter: xtables: move extension arguments into compound structure (5/6)

2008-10-08 11:35:19 +02:00

xt_TRACE.c

netfilter: xtables: move extension arguments into compound structure (4/6)

2008-10-08 11:35:19 +02:00

xt_u32.c

netfilter: xtables: move extension arguments into compound structure (1/6)

2008-10-08 11:35:18 +02:00