Patrick McHardy 42cf93cd46 [NETFILTER]: Fix bridge netfilter related in xfrm_lookup ...

The bridge-netfilter code attaches a fake dst_entry with dst->ops == NULL
to purely bridged packets. When these packets are SNATed and a policy
lookup is done, xfrm_lookup crashes because it tries to dereference
dst->ops.

Change xfrm_lookup not to dereference dst->ops before checking for the
DST_NOXFRM flag and set this flag in the fake dst_entry.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-02-23 16:10:51 -08:00

..

Kconfig

[NET]: move config options out to individual protocols

2005-07-11 21:13:56 -07:00

Makefile

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

xfrm_algo.c

[NET]: Change some "if (x) BUG();" to "BUG_ON(x);"

2006-01-09 14:16:18 -08:00

xfrm_input.c

[NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointers

2005-08-29 16:11:18 -07:00

xfrm_policy.c

[NETFILTER]: Fix bridge netfilter related in xfrm_lookup

2006-02-23 16:10:51 -08:00

xfrm_state.c

[LSM-IPSec]: Security association restriction.

2006-01-03 13:10:24 -08:00

xfrm_user.c

[LSM-IPSec]: Corrections to LSM-IPSec Nethooks

2006-01-06 13:22:39 -08:00