linux-toradex.git/net/ipv6, branch v3.13-rc5

netfilter: SYNPROXY target: restrict to INPUT/FORWARD

2013-12-11T10:30:25+00:00

Fix a crash in synproxy_send_tcp() when using the SYNPROXY target in the
PREROUTING chain caused by missing routing information.

Reported-by: Nicki P. 
Signed-off-by: Patrick McHardy 
Signed-off-by: Pablo Neira Ayuso

ipv6: do not erase dst address with flow label destination

2013-12-11T03:51:00+00:00

This patch is following b579035ff766c9412e2b92abf5cab794bff102b6
	"ipv6: remove old conditions on flow label sharing"

Since there is no reason to restrict a label to a
destination, we should not erase the destination value of a
socket with the value contained in the flow label storage.

This patch allows to really have the same flow label to more
than one destination.

Signed-off-by: Florent Fourcot 
Reviewed-by: Hannes Frederic Sowa 
Signed-off-by: David S. Miller

inet: fix NULL pointer Oops in fib(6)_rule_suppress

2013-12-10T22:54:23+00:00

This changes ensures that the routing entry investigated by the suppress
function actually does point to a device struct before following that pointer,
fixing a possible kernel oops situation when verifying the interface group
associated with a routing table entry.

According to Daniel Golle, this Oops can be triggered by a user process trying
to establish an outgoing IPv6 connection while having no real IPv6 connectivity
set up (only autoassigned link-local addresses).

Fixes: 6ef94cfafba15 ("fib_rules: add route suppression based on ifgroup")

Reported-by: Daniel Golle 
Tested-by: Daniel Golle 
Signed-off-by: Stefan Tomanek 
Signed-off-by: David S. Miller

ipv6: don't count addrconf generated routes against gc limit

2013-12-10T02:00:39+00:00

Brett Ciphery reported that new ipv6 addresses failed to get installed
because the addrconf generated dsts where counted against the dst gc
limit. We don't need to count those routes like we currently don't count
administratively added routes.

Because the max_addresses check enforces a limit on unbounded address
generation first in case someone plays with router advertisments, we
are still safe here.

Reported-by: Brett Ciphery 
Signed-off-by: Hannes Frederic Sowa 
Signed-off-by: David S. Miller

IPv6: Fixed support for blackhole and prohibit routes

2013-12-02T22:14:27+00:00

The behaviour of blackhole and prohibit routes has been corrected by setting
the input and output pointers of the dst variable appropriately. For
blackhole routes, they are set to dst_discard and to ip6_pkt_discard and
ip6_pkt_discard_out respectively for prohibit routes.

ipv6: ip6_pkt_prohibit(_out) should not depend on
CONFIG_IPV6_MULTIPLE_TABLES

We need ip6_pkt_prohibit(_out) available without
CONFIG_IPV6_MULTIPLE_TABLES

Signed-off-by: Kamala R 
Acked-by: Hannes Frederic Sowa 
Signed-off-by: David S. Miller

ipv6: fix third arg of anycast_dst_alloc(), must be bool.

2013-12-02T22:13:25+00:00

Signed-off-by: Francois-Xavier Le Bail 
Signed-off-by: David S. Miller

ipv6: judge the accept_ra_defrtr before calling rt6_route_rcv

2013-12-02T21:00:38+00:00

when dealing with a RA message, if accept_ra_defrtr is false,
the kernel will not add the default route, and then deal with
the following route information options. Unfortunately, those
options maybe contain default route, so let's judge the
accept_ra_defrtr before calling rt6_route_rcv.

Signed-off-by: Duan Jiong 
Signed-off-by: David S. Miller

ipv6: fix possible seqlock deadlock in ip6_finish_output2

2013-11-30T17:48:13+00:00

IPv6 stats are 64 bits and thus are protected with a seqlock. By not
disabling bottom-half we could deadlock here if we don't disable bh and
a softirq reentrantly updates the same mib.

Cc: Eric Dumazet 
Signed-off-by: Hannes Frederic Sowa 
Acked-by: Eric Dumazet 
Signed-off-by: David S. Miller

net: remove outdated comment for ipv4 and ipv6 protocol handler

2013-11-28T23:47:51+00:00

since f9242b6b28d61295f2bf7e8adfb1060b382e5381
inet: Sanitize inet{,6} protocol demux.

there are not pretended hash tables for ipv4 or
ipv6 protocol handler.

Signed-off-by: Baker Zhang 
Signed-off-by: David S. Miller

sit: use kfree_skb to replace dev_kfree_skb

2013-11-28T23:34:13+00:00

In failure case, we should use kfree_skb not
dev_kfree_skb to free skbuff, dev_kfree_skb
is defined as consume_skb.

Trace takes advantage of this point.

Signed-off-by: Gao feng 
Acked-by: Eric Dumazet 
Signed-off-by: David S. Miller