linux-toradex.git/net/ipv6, branch v2.6.35

ipv6: Don't add routes to ipv6 disabled interfaces.

2010-07-22T20:41:32+00:00

If the interface has IPv6 disabled, don't add a multicast or
link-local route since we won't be adding a link-local address.

Reported-by: Mahesh Kelkar 
Signed-off-by: Brian Haley 
Signed-off-by: David S. Miller

IPv6: fix CoA check in RH2 input handler (mip6_rthdr_input())

2010-07-18T22:04:33+00:00

The input handler for Type 2 Routing Header (mip6_rthdr_input())
checks if the CoA in the packet matches the CoA in the XFRM state.

Current check is buggy: it compares the adddress in the Type 2
Routing Header, i.e. the HoA, against the expected CoA in the state.
The comparison should be made against the address in the destination
field of the IPv6 header.

The bug remained unnoticed because the main (and possibly only current)
user of the code (UMIP MIPv6 Daemon) initializes the XFRM state with the
unspecified address, i.e. explicitly allows everything.

Yoshifuji-san, can you ack that one?

Signed-off-by: Arnaud Ebalard 
Signed-off-by: David S. Miller

xfrm: fix xfrm by MARK logic

2010-07-04T18:46:07+00:00

While using xfrm by MARK feature in
2.6.34 - 2.6.35 kernels, the mark
is always cleared in flowi structure via memset in
_decode_session4 (net/ipv4/xfrm4_policy.c), so
the policy lookup fails.
IPv6 code is affected by this bug too.

Signed-off-by: Peter Kosyh 
Acked-by: Eric Dumazet 
Signed-off-by: David S. Miller

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-2.6

2010-07-03T05:04:49+00:00

netfilter: ip6t_REJECT: fix a dst leak in ipv6 REJECT

2010-07-02T08:05:01+00:00

We should release dst if dst->error is set.

Bug introduced in 2.6.14 by commit e104411b82f5c
([XFRM]: Always release dst_entry on error in xfrm_lookup)

Signed-off-by: Eric Dumazet 
Cc: stable@kernel.org
Signed-off-by: Patrick McHardy

ipv6: fix NULL reference in proxy neighbor discovery

2010-06-26T04:16:57+00:00

The addition of TLLAO option created a kernel OOPS regression
for the case where neighbor advertisement is being sent via
proxy path.  When using proxy, ipv6_get_ifaddr() returns NULL
causing the NULL dereference.

Change causing the bug was:
commit f7734fdf61ec6bb848e0bafc1fb8bad2c124bb50
Author: Octavian Purdila 
Date:   Fri Oct 2 11:39:15 2009 +0000

    make TLLAO option for NA packets configurable

Signed-off-by: Stephen Hemminger 
Acked-by: YOSHIFUJI Hideaki 
Signed-off-by: David S. Miller

ipv6: fix ICMP6_MIB_OUTERRORS

2010-06-10T01:39:27+00:00

In commit 1f8438a85366 (icmp: Account for ICMP out errors), I did a typo
on IPV6 side, using ICMP6_MIB_OUTMSGS instead of ICMP6_MIB_OUTERRORS

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

ipmr: dont corrupt lists

2010-06-07T09:57:14+00:00

ipmr_rules_exit() and ip6mr_rules_exit() free a list of items, but
forget to properly remove these items from list. List head is not
changed and still points to freed memory.

This can trigger a fault later when icmpv6_sk_exit() is called.

Fix is to either reinit list, or use list_del() to properly remove items
from list before freeing them.

bugzilla report : https://bugzilla.kernel.org/show_bug.cgi?id=16120

Introduced by commit d1db275dd3f6e4 (ipv6: ip6mr: support multiple
tables) and commit f0ad0860d01e (ipv4: ipmr: support multiple tables)

Reported-by: Alex Zhavnerchik 
Signed-off-by: Eric Dumazet 
CC: Patrick McHardy 
Signed-off-by: David S. Miller

ip6mr: fix a typo in ip6mr_for_each_table()

2010-06-06T22:34:40+00:00

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller

ipv6: avoid high order allocations

2010-06-05T10:03:30+00:00

With mtu=9000, mld_newpack() use order-2 GFP_ATOMIC allocations, that
are very unreliable, on machines where PAGE_SIZE=4K

Limit allocated skbs to be at most one page. (order-0 allocations)

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller