Minki/linux
1
0
Fork 1
mirror of https://github.com/torvalds/linux.git synced 2024-11-04 11:04:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
69567d0b63
linux/net/ipv6
History
Herbert Xu aebcf82c1f [IPSEC]: Do not let packets pass when ICMP flag is off 
This fixes a logical error in ICMP policy checks which lets
packets through if the state ICMP flag is off.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-01-28 14:57:43 -08:00
..
netfilter [NETFILTER]: {nfnetlink,ip,ip6}_queue: kill issue_verdict 2008-01-28 14:56:15 -08:00
addrconf_core.c [IPV6]: ipv6_addr_type() doesn't know about RFC4193 addresses. 2007-07-31 02:28:21 -07:00
addrconf.c [NET]: Remove unused "mibalign" argument for snmp_mib_init(). 2008-01-28 14:57:02 -08:00
addrlabel.c [NET]: Make rtnetlink infrastructure network namespace aware (v3) 2008-01-28 14:54:25 -08:00
af_inet6.c [IPV6]: make the protocol initialization to return an error code 2008-01-28 14:57:13 -08:00
ah6.c [IPSEC]: Move state lock into x->type->input 2008-01-28 14:53:52 -08:00
anycast.c [NET]: Make core networking code use seq_open_private 2007-10-10 16:55:33 -07:00
datagram.c [IPSEC]: Make callers of xfrm_lookup to use XFRM_LOOKUP_WAIT 2008-01-28 14:57:42 -08:00
esp6.c [IPSEC]: Move state lock into x->type->input 2008-01-28 14:53:52 -08:00
exthdrs_core.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
exthdrs.c [IPV6]: make extended headers to return an error at initialization 2008-01-28 14:57:10 -08:00
fib6_rules.c [IPV6]: Make fib6_rules_init to return an error code. 2008-01-28 14:56:46 -08:00
icmp.c [IPSEC]: Do not let packets pass when ICMP flag is off 2008-01-28 14:57:43 -08:00
inet6_connection_sock.c [IPV6] __inet6_csk_dst_store(): fix check-after-use 2007-10-15 12:26:32 -07:00
inet6_hashtables.c [IPV6]: Mischecked tw match in __inet6_check_established. 2008-01-20 20:31:36 -08:00
ip6_fib.c [IPV6] route6/fib6: Don't panic a kmem_cache_create. 2008-01-28 14:56:48 -08:00
ip6_flowlabel.c [IPV6]: make flowlabel to return an error 2008-01-28 14:57:10 -08:00
ip6_input.c [IPv6] RAW: Compact the API for the kernel 2008-01-28 14:54:29 -08:00
ip6_output.c [NETFILTER]: Introduce NF_INET_ hook values 2008-01-28 14:53:55 -08:00
ip6_tunnel.c [IPV6]: Add ip6_local_out 2008-01-28 14:53:47 -08:00
ipcomp6.c [IPSEC]: Forbid BEET + ipcomp for now 2008-01-28 14:53:43 -08:00
ipv6_sockglue.c [IPV6]: make the protocol initialization to return an error code 2008-01-28 14:57:13 -08:00
Kconfig [IPV6] MIP6: Loadable module support for MIPv6. 2007-07-10 22:15:42 -07:00
Makefile [IPV6]: Make the ipv6/sysctl_net_ipv6.c compilation cleaner 2008-01-28 14:56:29 -08:00
mcast.c [NETFILTER]: Introduce NF_INET_ hook values 2008-01-28 14:53:55 -08:00
mip6.c [IPSEC]: Move state lock into x->type->input 2008-01-28 14:53:52 -08:00
ndisc.c [NET]: Make rtnetlink infrastructure network namespace aware (v3) 2008-01-28 14:54:25 -08:00
netfilter.c [NETFILTER]: nf_queue: move list_head/skb/id to struct nf_info 2008-01-28 14:56:14 -08:00
proc.c [UDP]: Restore missing inDatagrams increments 2008-01-28 14:56:33 -08:00
protocol.c [IPV6]: Decentralize EXPORT_SYMBOLs. 2007-04-25 22:23:36 -07:00
raw.c [IPSEC]: Make callers of xfrm_lookup to use XFRM_LOOKUP_WAIT 2008-01-28 14:57:42 -08:00
reassembly.c [IPV6]: make frag to return an error at initialization 2008-01-28 14:57:11 -08:00
route.c [IPV6]: route6 remove ifdef for fib_rules 2008-01-28 14:56:59 -08:00
sit.c [IPV6]: Add RFC4214 support 2008-01-28 14:55:09 -08:00
sysctl_net_ipv6.c [IPV6]: Use sysctl paths to register ipv6 sysctl tables 2008-01-28 14:56:30 -08:00
tcp_ipv6.c [IPSEC]: Make callers of xfrm_lookup to use XFRM_LOOKUP_WAIT 2008-01-28 14:57:42 -08:00
tunnel6.c [IPV6]: Replace sk_buff ** with sk_buff * in input handlers 2007-10-15 12:50:28 -07:00
udp_impl.h [IPV6]: Replace sk_buff ** with sk_buff * in input handlers 2007-10-15 12:50:28 -07:00
udp.c [IPSEC]: Make callers of xfrm_lookup to use XFRM_LOOKUP_WAIT 2008-01-28 14:57:42 -08:00
udplite.c [IPV6]: make the protocol initialization to return an error code 2008-01-28 14:57:13 -08:00
xfrm6_input.c [IPSEC]: Use the correct family for input state lookup 2008-01-28 14:55:49 -08:00
xfrm6_mode_beet.c [IPSEC]: Separate inner/outer mode processing on input 2008-01-28 14:53:46 -08:00
xfrm6_mode_ro.c [IPSEC]: Make x->lastused an unsigned long 2008-01-28 14:53:52 -08:00
xfrm6_mode_transport.c [IPSEC]: Use IPv6 calling convention as the convention for x->mode->output 2007-10-10 16:55:54 -07:00
xfrm6_mode_tunnel.c [IPSEC]: Separate inner/outer mode processing on input 2008-01-28 14:53:46 -08:00
xfrm6_output.c [NETFILTER]: Introduce NF_INET_ hook values 2008-01-28 14:53:55 -08:00
xfrm6_policy.c [IPSEC]: Added xfrm_decode_session_reverse and xfrmX_policy_check_reverse 2008-01-28 14:57:22 -08:00
xfrm6_state.c [IPV6]: Make xfrm6_init to return an error code. 2008-01-28 14:56:45 -08:00
xfrm6_tunnel.c [IPSEC]: Get nexthdr from caller in xfrm6_rcv_spi 2007-10-17 21:29:25 -07:00