linux/net
Patrick McHardy a193a4abdd [NETFILTER]: Fix skb->nf_bridge lifetime issues
The bridge netfilter code simulates the NF_IP_PRE_ROUTING hook and skips
the real hook by registering with high priority and returning NF_STOP if
skb->nf_bridge is present and the BRNF_NF_BRIDGE_PREROUTING flag is not
set. The flag is only set during the simulated hook.

Because skb->nf_bridge is only freed when the packet is destroyed, the
packet will not only skip the first invocation of NF_IP_PRE_ROUTING, but
in the case of tunnel devices on top of the bridge also all further ones.
Forwarded packets from a bridge encapsulated by a tunnel device and sent
as locally outgoing packet will also still have the incorrect bridge
information from the input path attached.

We already have nf_reset calls on all RX/TX paths of tunnel devices,
so simply reset the nf_bridge field there too. As an added bonus,
the bridge information for locally delivered packets is now also freed
when the packet is queued to a socket.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-03-20 19:23:05 -08:00
..
802 [P8023]: Fix tainting of kernel. 2006-02-13 15:38:42 -08:00
8021q [VLAN]: translate IF_OPER_DORMANT to netif_dormant_on() 2006-03-20 17:11:41 -08:00
appletalk
atm [ATM]: keep atmsvc failure messages quiet 2006-03-04 21:06:25 -08:00
ax25 [AX.25]: Fix potencial memory hole. 2006-03-19 13:20:06 -08:00
bluetooth [Bluetooth] Fix NULL pointer dereferences of the HCI socket 2006-02-13 11:40:03 +01:00
bridge [NETFILTER]: Fix wrong option spelling in Makefile for CONFIG_BRIDGE_EBT_ULOG 2006-03-11 18:51:25 -08:00
core [IPSEC]: Sync series - core changes 2006-03-20 19:15:11 -08:00
dccp [DCCP] feat: Actually change the CCID upon negotiation 2006-03-20 19:22:37 -08:00
decnet
econet
ethernet [NET] ethernet: Fix first packet goes out with MAC 00:00:00:00:00:00 2006-02-23 16:18:01 -08:00
ieee80211 [PATCH] ieee80211: Don't update network statistics from off-channel packets. 2006-03-17 15:38:55 -05:00
ipv4 [NETFILTER]: Fix skb->nf_bridge lifetime issues 2006-03-20 19:23:05 -08:00
ipv6 [IPSEC]: Sync series - fast path 2006-03-20 19:15:29 -08:00
ipx
irda [IRDA]: out of range array access 2006-02-09 16:59:48 -08:00
key [IPSEC]: Sync series - user 2006-03-20 19:16:12 -08:00
lapb
llc
netfilter [NETFILTER]: ctnetlink: avoid unneccessary event message generation 2006-03-20 18:03:59 -08:00
netlink [NETLINK]: Add netlink_has_listeners for avoiding unneccessary event message generation 2006-03-20 18:52:01 -08:00
netrom
packet [NET]: Fix some whitespace issues in af_packet.c 2006-01-23 16:28:02 -08:00
rose
rxrpc [NET]: "signed long" -> "long" 2006-01-17 13:03:54 -08:00
sched [PKT_SCHED]: Convert sch_red to a classful qdisc 2006-03-20 19:20:44 -08:00
sctp [SCTP]: Fix 'fast retransmit' to send a TSN only once. 2006-02-02 16:57:31 -08:00
sunrpc [PATCH] SUNRPC: Fix potential deadlock in RPC code 2006-03-14 07:57:18 -08:00
tipc [TIPC] Avoid polluting the global namespace 2006-01-18 00:45:16 +01:00
unix [PATCH] fix file counting 2006-03-08 14:14:01 -08:00
wanrouter
x25
xfrm [XFRM]: Add some missing exports. 2006-03-20 19:18:52 -08:00
compat.c
Kconfig Merge branch 'master' 2006-02-07 01:47:12 -05:00
Makefile
nonet.c
socket.c [NET]: Do not lose accepted socket when -ENFILE/-EMFILE. 2006-03-20 17:13:49 -08:00
sysctl_net.c
TUNABLE