Sebastian Pöhn 2ab957492d ip_forward: Drop frames with attached skb->sk ...

Initial discussion was:
[FYI] xfrm: Don't lookup sk_policy for timewait sockets

Forwarded frames should not have a socket attached. Especially
tw sockets will lead to panics later-on in the stack.

This was observed with TPROXY assigning a tw socket and broken
policy routing (misconfigured). As a result frame enters
forwarding path instead of input. We cannot solve this in
TPROXY as it cannot know that policy routing is broken.

v2:
Remove useless comment

Signed-off-by: Sebastian Poehn <sebastian.poehn@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2015-04-20 14:07:33 -04:00

..

netfilter

netfilter: nf_tables: switch registers to 32 bit addressing

2015-04-13 17:17:29 +02:00

af_inet.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

ah4.c

ipsec: Remove obsolete MAX_AH_AUTH_LEN

2014-09-18 10:54:36 +02:00

arp.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

cipso_ipv4.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

datagram.c

net: Save TX flow hash in sock and set in skbuf on xmit

2014-07-07 21:14:21 -07:00

devinet.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

esp4.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

fib_frontend.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-04-06 22:34:15 -04:00

fib_lookup.h

ipv4: FIB Local/MAIN table collapse

2015-03-11 16:22:14 -04:00

fib_rules.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

fib_semantics.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

fib_trie.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

fou.c

fou: avoid missing unlock in failure path

2015-04-16 12:11:19 -04:00

geneve.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-04-14 15:44:14 -04:00

gre_demux.c

net: Fix GRE RX to use skb_transport_header for GRE header offset

2014-09-08 15:23:05 -07:00

gre_offload.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

icmp.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

igmp.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

inet_connection_sock.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

inet_diag.c

inet_diag: fix access to tcp cc information

2015-04-17 13:28:31 -04:00

inet_fragment.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

inet_hashtables.c

tcp/dccp: get rid of central timewait timer

2015-04-13 16:40:05 -04:00

inet_lro.c

lro: remove dead code

2013-12-29 16:34:25 -05:00

inet_timewait_sock.c

tcp/dccp: get rid of central timewait timer

2015-04-13 16:40:05 -04:00

inetpeer.c

inet: remove dead inetpeer sequence code

2014-09-08 16:42:42 -07:00

ip_forward.c

ip_forward: Drop frames with attached skb->sk

2015-04-20 14:07:33 -04:00

ip_fragment.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

ip_gre.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

ip_input.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

ip_options.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

ip_output.c

net: remove extra newlines

2015-04-07 22:24:37 -04:00

ip_sockglue.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

ip_tunnel_core.c

ipv4: ip_tunnel: use net namespace from rtable not socket

2015-04-08 12:09:42 -04:00

ip_tunnel.c

udp_tunnel: Pass UDP socket down through udp_tunnel{, 6}_xmit_skb().

2015-04-07 15:29:08 -04:00

ip_vti.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

ipcomp.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

ipconfig.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

ipip.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

ipmr.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

Kconfig

net: Move fou_build_header into fou.c and refactor

2014-11-05 16:30:02 -05:00

Makefile

net: Add Geneve tunneling protocol driver

2014-10-06 00:32:20 -04:00

netfilter.c

netfilter: Use nf_hook_state in nf_queue_entry.

2015-04-04 12:25:22 -04:00

ping.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

proc.c

tcp/dccp: get rid of central timewait timer

2015-04-13 16:40:05 -04:00

protocol.c

net: Export inet_offloads and inet6_offloads

2014-09-19 17:15:31 -04:00

raw.c

Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2015-04-13 18:18:05 -04:00

route.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

syncookies.c

tcp: fix ipv4 mapped request socks

2015-03-25 00:57:48 -04:00

sysctl_net_ipv4.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

tcp_bic.c

tcp: stretch ACK fixes prep

2015-01-28 22:18:37 -08:00

tcp_cong.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-03-20 18:51:09 -04:00

tcp_cubic.c

tcp: restore 1.5x per RTT limit to CUBIC cwnd growth in congestion avoidance

2015-03-11 16:51:51 -04:00

tcp_dctcp.c

inet_diag: fix access to tcp cc information

2015-04-17 13:28:31 -04:00

tcp_diag.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

tcp_fastopen.c

tcp: RFC7413 option support for Fast Open server

2015-04-07 18:36:39 -04:00

tcp_highspeed.c

tcp: whitespace fixes

2014-09-01 18:12:45 -07:00

tcp_htcp.c

tcp: whitespace fixes

2014-09-01 18:12:45 -07:00

tcp_hybla.c

tcp: whitespace fixes

2014-09-01 18:12:45 -07:00

tcp_illinois.c

inet_diag: fix access to tcp cc information

2015-04-17 13:28:31 -04:00

tcp_input.c

tcp: fix bogus RTT for CC when retransmissions are acked

2015-04-13 13:54:25 -04:00

tcp_ipv4.c

tcp/dccp: get rid of central timewait timer

2015-04-13 16:40:05 -04:00

tcp_lp.c

tcp: remove in_flight parameter from cong_avoid() methods

2014-05-03 19:23:07 -04:00

tcp_memcontrol.c

memcg: cleanup static keys decrement

2015-02-12 18:54:10 -08:00

tcp_metrics.c

tcp: RFC7413 option support for Fast Open client

2015-04-07 18:36:39 -04:00

tcp_minisocks.c

tcp/dccp: get rid of central timewait timer

2015-04-13 16:40:05 -04:00

tcp_offload.c

tcp: cleanup static functions

2015-02-28 16:56:51 -05:00

tcp_output.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-04-14 15:44:14 -04:00

tcp_probe.c

tcp: whitespace fixes

2014-09-01 18:12:45 -07:00

tcp_scalable.c

tcp: stretch ACK fixes prep

2015-01-28 22:18:37 -08:00

tcp_timer.c

tcp: RFC7413 option support for Fast Open client

2015-04-07 18:36:39 -04:00

tcp_vegas.c

inet_diag: fix access to tcp cc information

2015-04-17 13:28:31 -04:00

tcp_vegas.h

inet_diag: fix access to tcp cc information

2015-04-17 13:28:31 -04:00

tcp_veno.c

tcp: stretch ACK fixes prep

2015-01-28 22:18:37 -08:00

tcp_westwood.c

inet_diag: fix access to tcp cc information

2015-04-17 13:28:31 -04:00

tcp_yeah.c

tcp: stretch ACK fixes prep

2015-01-28 22:18:37 -08:00

tcp.c

tcp: tcp_get_info() should fetch socket fields once

2015-04-17 13:28:31 -04:00

tunnel4.c

…

udp_diag.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

udp_impl.h

net: Remove iocb argument from sendmsg and recvmsg

2015-03-02 13:06:31 -05:00

udp_offload.c

ipv4: coding style: comparison for inequality with NULL

2015-04-03 12:11:15 -04:00

udp_tunnel.c

udp_tunnel: Pass UDP socket down through udp_tunnel{, 6}_xmit_skb().

2015-04-07 15:29:08 -04:00

udp.c

net: remove extra newlines

2015-04-07 22:24:37 -04:00

udplite.c

net: Eliminate no_check from protosw

2014-05-23 16:28:53 -04:00

xfrm4_input.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

xfrm4_mode_beet.c

ipv4: ERROR: code indent should use tabs where possible

2013-12-26 13:43:21 -05:00

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

ipv4: hash net ptr into fragmentation bucket selection

2015-03-25 14:07:04 -04:00

xfrm4_output.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

xfrm4_policy.c

ipv4: coding style: comparison for equality with NULL

2015-04-03 12:11:15 -04:00

xfrm4_protocol.c

xfrm4: Remove duplicate semicolon

2014-06-30 07:49:47 +02:00

xfrm4_state.c

…

xfrm4_tunnel.c

…