iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/netfilter
History
Balazs Scheidler c49b9f295e tproxy: fixe a possible read from an invalid location in the socket match 
TIME_WAIT sockets need to be handled specially, and the socket match
casted inet_timewait_sock instances to inet_sock, which are not
compatible.

Handle this special case by checking sk->sk_state.

Signed-off-by: Balazs Scheidler <bazsi@balabit.hu>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-12-07 23:53:46 -08:00
..
ipvs
netfilter: payload_len is be16, add size of struct rather than size of pointer
2008-11-10 16:46:06 -08:00
core.c
netfilter: enable netfilter in netns
2008-10-08 11:35:11 +02:00
Kconfig
netfilter: ctnetlink: remove obsolete NAT dependency from Kconfig
2008-10-20 03:31:17 -07:00
Makefile
Merge branch 'lvs-next-2.6' of git://git.kernel.org/pub/scm/linux/kernel/git/horms/lvs-2.6
2008-10-08 14:26:36 -07:00
nf_conntrack_acct.c
fix random typos
2008-10-16 11:21:30 -07:00
nf_conntrack_amanda.c
[NETFILTER]: nf_conntrack: add tuplehash l3num/protonum accessors
2008-04-14 11:15:52 +02:00
nf_conntrack_core.c
netfilter: ctnetlink: fix conntrack creation race
2008-11-24 15:56:17 -08:00
nf_conntrack_ecache.c
netfilter: netns nf_conntrack: per-netns event cache
2008-10-08 11:35:07 +02:00
nf_conntrack_expect.c
netfilter: netns nf_conntrack: final netns tweaks
2008-10-08 11:35:09 +02:00
nf_conntrack_extend.c
netfilter: nf_conntrack_extend: avoid unnecessary "ct->ext" dereferences
2008-07-26 17:50:05 -07:00
nf_conntrack_ftp.c
netfilter: netns nf_conntrack: pass conntrack to nf_conntrack_event_cache() not skb
2008-10-08 11:35:07 +02:00
nf_conntrack_h323_asn1.c
[NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper
2008-01-31 19:28:07 -08:00
nf_conntrack_h323_main.c
netfilter: netns nf_conntrack: H323 conntracking in netns
2008-10-08 11:35:09 +02:00
nf_conntrack_h323_types.c
[NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper
2008-01-31 19:28:07 -08:00
nf_conntrack_helper.c
netfilter: netns ct: walk netns list under RTNL
2008-11-05 03:03:18 -08:00
nf_conntrack_irc.c
netfilter: nf_conntrack_irc: make sure string is terminated before calling simple_strtoul
2008-09-07 18:21:24 -07:00
nf_conntrack_l3proto_generic.c
[NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l3proto
2008-04-14 11:15:52 +02:00
nf_conntrack_netbios_ns.c
[NETFILTER]: nf_conntrack: introduce expectation classes and policies
2008-03-25 20:09:15 -07:00
nf_conntrack_netlink.c
netfilter: ctnetlink: fix GFP_KERNEL allocation under spinlock
2008-11-26 03:57:44 -08:00
nf_conntrack_pptp.c
driver core: basic infrastructure for per-module dynamic debug messages
2008-10-16 09:24:47 -07:00
nf_conntrack_proto_dccp.c
netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl
2008-10-08 11:35:08 +02:00
nf_conntrack_proto_generic.c
netfilter: Use unsigned types for hooknum and pf vars
2008-10-08 11:35:00 +02:00
nf_conntrack_proto_gre.c
netfilter: nf_conntrack_proto_gre: switch to register_pernet_gen_subsys()
2008-10-30 23:55:44 -07:00
nf_conntrack_proto_sctp.c
netfilter: netns nf_conntrack: pass conntrack to nf_conntrack_event_cache() not skb
2008-10-08 11:35:07 +02:00
nf_conntrack_proto_tcp.c
netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl
2008-10-08 11:35:08 +02:00
nf_conntrack_proto_udp.c
netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl
2008-10-08 11:35:08 +02:00
nf_conntrack_proto_udplite.c
netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl
2008-10-08 11:35:08 +02:00
nf_conntrack_proto.c
netfilter: netns ct: walk netns list under RTNL
2008-11-05 03:03:18 -08:00
nf_conntrack_sane.c
[NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call
2008-04-14 11:15:54 +02:00
nf_conntrack_sip.c
netfilter: netns nf_conntrack: SIP conntracking in netns
2008-10-08 11:35:09 +02:00
nf_conntrack_standalone.c
netfilter: netns nf_conntrack: per-netns net.netfilter.nf_conntrack_log_invalid sysctl
2008-10-08 11:35:08 +02:00
nf_conntrack_tftp.c
[NETFILTER]: nf_conntrack: replace NF_CT_DUMP_TUPLE macro indrection by function call
2008-04-14 11:15:54 +02:00
nf_internals.h
netfilter: Use unsigned types for hooknum and pf vars
2008-10-08 11:35:00 +02:00
nf_log.c
netfilter: Introduce NFPROTO_* constants
2008-10-08 11:35:00 +02:00
nf_queue.c
netfilter: Introduce NFPROTO_* constants
2008-10-08 11:35:00 +02:00
nf_sockopt.c
netfilter: enable netfilter in netns
2008-10-08 11:35:11 +02:00
nf_tproxy_core.c
netfilter: remove unused #include <version.h>
2008-10-12 21:08:34 -07:00
nfnetlink_log.c
netfilter: Use unsigned types for hooknum and pf vars
2008-10-08 11:35:00 +02:00
nfnetlink_queue.c
netns: Use net_eq() to compare net-namespaces for optimization.
2008-07-19 22:34:43 -07:00
nfnetlink.c
net: Remove CONFIG_KMOD from net/ (towards removing CONFIG_KMOD entirely)
2008-10-16 15:24:51 -07:00
x_tables.c
netfilter: xtables: provide invoked family value to extensions
2008-10-08 11:35:20 +02:00
xt_CLASSIFY.c
netfilter: xtables: move extension arguments into compound structure (4/6)
2008-10-08 11:35:19 +02:00
xt_comment.c
netfilter: xtables: use NFPROTO_UNSPEC in more extensions
2008-10-08 11:35:20 +02:00
xt_connbytes.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_connlimit.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_connmark.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_CONNMARK.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_CONNSECMARK.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_conntrack.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_dccp.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_dscp.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_DSCP.c
netfilter: xtables: move extension arguments into compound structure (5/6)
2008-10-08 11:35:19 +02:00
xt_esp.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_hashlimit.c
netfilter: xtables: move extension arguments into compound structure (3/6)
2008-10-08 11:35:19 +02:00
xt_helper.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_iprange.c
netfilter: xt_iprange: fix range inversion match
2008-10-20 03:32:21 -07:00
xt_length.c
netfilter: xtables: move extension arguments into compound structure (1/6)
2008-10-08 11:35:18 +02:00
xt_limit.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_mac.c
netfilter: xtables: use NFPROTO_UNSPEC in more extensions
2008-10-08 11:35:20 +02:00
xt_mark.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_MARK.c
netfilter: xtables: use NFPROTO_UNSPEC in more extensions
2008-10-08 11:35:20 +02:00
xt_multiport.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_NFLOG.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_NFQUEUE.c
netfilter: replace old NF_ARP calls with NFPROTO_ARP
2008-10-20 03:34:51 -07:00
xt_NOTRACK.c
netfilter: xtables: use NFPROTO_UNSPEC in more extensions
2008-10-08 11:35:20 +02:00
xt_owner.c
netfilter: xtables: use NFPROTO_UNSPEC in more extensions
2008-10-08 11:35:20 +02:00
xt_physdev.c
netfilter: xtables: use NFPROTO_UNSPEC in more extensions
2008-10-08 11:35:20 +02:00
xt_pkttype.c
netfilter: xtables: cut down on static data for family-independent extensions
2008-10-08 11:35:20 +02:00
xt_policy.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_quota.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_rateest.c
netfilter: xtables: move extension arguments into compound structure (3/6)
2008-10-08 11:35:19 +02:00
xt_RATEEST.c
netfilter: xtables: move extension arguments into compound structure (6/6)
2008-10-08 11:35:19 +02:00
xt_realm.c
netfilter: xtables: use NFPROTO_UNSPEC in more extensions
2008-10-08 11:35:20 +02:00
xt_recent.c
netfilter: xt_recent: use proc_create_data()
2008-10-20 03:33:49 -07:00
xt_sctp.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_SECMARK.c
netfilter: xtables: move extension arguments into compound structure (6/6)
2008-10-08 11:35:19 +02:00
xt_socket.c
tproxy: fixe a possible read from an invalid location in the socket match
2008-12-07 23:53:46 -08:00
xt_state.c
netfilter: xtables: move extension arguments into compound structure (3/6)
2008-10-08 11:35:19 +02:00
xt_statistic.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_string.c
netfilter: xtables: move extension arguments into compound structure (3/6)
2008-10-08 11:35:19 +02:00
xt_tcpmss.c
netfilter: xtables: move extension arguments into compound structure (1/6)
2008-10-08 11:35:18 +02:00
xt_TCPMSS.c
netfilter: xtables: move extension arguments into compound structure (5/6)
2008-10-08 11:35:19 +02:00
xt_TCPOPTSTRIP.c
netfilter: xtables: move extension arguments into compound structure (4/6)
2008-10-08 11:35:19 +02:00
xt_tcpudp.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_time.c
netfilter: xtables: move extension arguments into compound structure (2/6)
2008-10-08 11:35:18 +02:00
xt_TPROXY.c
netfilter: xtables: move extension arguments into compound structure (5/6)
2008-10-08 11:35:19 +02:00
xt_TRACE.c
netfilter: xtables: move extension arguments into compound structure (4/6)
2008-10-08 11:35:19 +02:00
xt_u32.c
netfilter: xtables: move extension arguments into compound structure (1/6)
2008-10-08 11:35:18 +02:00