Herbert Xu 89cee8b1cb [IPV4]: Safer reassembly ...

Another spin of Herbert Xu's "safer ip reassembly" patch
for 2.6.16.

(The original patch is here:
http://marc.theaimsgroup.com/?l=linux-netdev&m=112281936522415&w=2
and my only contribution is to have tested it.)

This patch (optionally) does additional checks before accepting IP
fragments, which can greatly reduce the possibility of reassembling
fragments which originated from different IP datagrams.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Arthur Kepner <akepner@sgi.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-01-03 13:10:31 -08:00

..

ipvs

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

netfilter

[NETFILTER] ip_tables: NUMA-aware allocation

2006-01-03 13:10:29 -08:00

af_inet.c

[IPV4] Fix EPROTONOSUPPORT error in inet_create

2005-12-02 20:43:26 -08:00

ah4.c

[CRYPTO]: crypto_free_tfm() callers no longer need to check for NULL

2005-09-01 17:44:29 -07:00

arp.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

datagram.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

devinet.c

[IPV4]: Fix secondary IP addresses after promotion

2005-11-22 14:47:37 -08:00

esp4.c

[IPSEC] Fix block size/MTU bugs in ESP

2005-10-10 21:11:34 -07:00

fib_frontend.c

[NETLINK]: Fix processing of fib_lookup netlink messages

2005-12-01 14:30:00 -08:00

fib_hash.c

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

fib_lookup.h

[IPV4]: Prepare FIB core for RCU.

2005-08-29 16:08:31 -07:00

fib_rules.c

[NETLINK]: Correctly set NLM_F_MULTI without checking the pid

2005-06-18 22:54:12 -07:00

fib_semantics.c

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

fib_trie.c

[FIB_TRIE]: Don't show local table in /proc/net/route output

2005-11-20 21:09:00 -08:00

icmp.c

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

igmp.c

[IGMP]: workaround for IGMP v1/v2 bug

2005-12-02 20:32:59 -08:00

inet_connection_sock.c

[TCP/DCCP]: Randomize port selection

2005-11-05 21:23:15 -02:00

inet_diag.c

[NETLINK]: Make netlink_callback->done() optional

2005-11-10 02:26:40 +01:00

inet_hashtables.c

[NET]: Introduce inet_connection_sock

2005-08-29 15:43:19 -07:00

inet_timewait_sock.c

[TWSK]: Grab the module refcount for timewait sockets

2005-10-10 21:25:23 -07:00

inetpeer.c

[IPV4]: Safer reassembly

2006-01-03 13:10:31 -08:00

ip_forward.c

[IPV4]: Remove some dead code from ip_forward()

2005-08-29 16:03:06 -07:00

ip_fragment.c

[IPV4]: Safer reassembly

2006-01-03 13:10:31 -08:00

ip_gre.c

[GRE]: Fix hardware checksum modification

2005-12-14 12:55:24 -08:00

ip_input.c

[NET]: use __read_mostly on kmem_cache_t , DEFINE_SNMP_STAT pointers

2005-08-29 16:11:18 -07:00

ip_options.c

[NET]: kfree cleanup

2005-11-08 09:41:34 -08:00

ip_output.c

[IPV4]: Safer reassembly

2006-01-03 13:10:31 -08:00

ip_sockglue.c

[NET]: kfree cleanup

2005-11-08 09:41:34 -08:00

ipcomp.c

[CRYPTO]: crypto_free_tfm() callers no longer need to check for NULL

2005-09-01 17:44:29 -07:00

ipconfig.c

[NET]: fix-up schedule_timeout() usage

2005-09-12 14:15:34 -07:00

ipip.c

[NET]: fix oops after tunnel module unload

2005-07-30 17:46:44 -07:00

ipmr.c

[IPV4]: Replace __in_dev_get with __in_dev_get_rcu/rtnl

2005-10-03 14:35:55 -07:00

Kconfig

[TCP] BIC: CUBIC window growth (2.0)

2006-01-03 13:10:28 -08:00

Makefile

[TCP] BIC: CUBIC window growth (2.0)

2006-01-03 13:10:28 -08:00

multipath_drr.c

[IPV4]: possible cleanups

2005-08-29 15:33:20 -07:00

multipath_random.c

[IPV4]: Multipath modules need a license to prevent kernel tainting.

2005-06-13 14:29:06 -07:00

multipath_rr.c

[IPV4]: Multipath modules need a license to prevent kernel tainting.

2005-06-13 14:29:06 -07:00

multipath_wrandom.c

[NET]: kfree cleanup

2005-11-08 09:41:34 -08:00

multipath.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

netfilter.c

[NETFILTER]: Move reroute-after-queue code up to the nf_queue layer.

2005-08-29 15:36:19 -07:00

proc.c

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

protocol.c

[TCP]: Move the tcp sock states to net/tcp_states.h

2005-08-29 15:41:54 -07:00

raw.c

[PATCH] raw_sendmsg DoS on 2.6

2005-09-19 18:45:42 -07:00

route.c

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

syncookies.c

[NET]: Fix sparse warnings

2005-08-29 16:01:32 -07:00

sysctl_net_ipv4.c

[IPV4]: Safer reassembly

2006-01-03 13:10:31 -08:00

tcp_bic.c

[TCP] BIC: spelling and whitespace

2006-01-03 13:10:27 -08:00

tcp_cong.c

[TCP]: Appropriate Byte Count support

2005-11-10 17:09:53 -08:00

tcp_cubic.c

[TCP] BIC: CUBIC window growth (2.0)

2006-01-03 13:10:28 -08:00

tcp_diag.c

[INET_DIAG]: Move the tcp_diag interface to the proper place

2005-08-29 15:57:54 -07:00

tcp_highspeed.c

[TCP]: TCP highspeed build error

2005-11-17 14:11:18 -08:00

tcp_htcp.c

[TCP]: add tcp_slow_start helper

2005-11-10 17:07:24 -08:00

tcp_hybla.c

[TCP]: fix congestion window update when using TSO deferal

2005-11-10 16:53:30 -08:00

tcp_input.c

[TCP]: More spelling fixes.

2005-11-15 15:17:10 -08:00

tcp_ipv4.c

[TCP]: spelling fixes

2005-11-10 17:13:47 -08:00

tcp_minisocks.c

[TCP]: spelling fixes

2005-11-10 17:13:47 -08:00

tcp_output.c

[TCP] Vegas: timestamp before clone

2005-12-06 16:24:52 -08:00

tcp_scalable.c

[TCP]: add tcp_slow_start helper

2005-11-10 17:07:24 -08:00

tcp_timer.c

[TCP]: spelling fixes

2005-11-10 17:13:47 -08:00

tcp_vegas.c

[TCP] Vegas: Remove extra call to tcp_vegas_rtt_calc

2005-12-06 16:17:11 -08:00

tcp_westwood.c

[INET_DIAG]: Rename tcp_diag.[ch] to inet_diag.[ch]

2005-08-29 15:57:48 -07:00

tcp.c

[NET]: Add const markers to various variables.

2005-11-29 16:21:38 -08:00

udp.c

[NET]: Detect hardware rx checksum faults correctly

2005-11-10 13:01:24 -08:00

xfrm4_input.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

xfrm4_output.c

[IPSEC]: Add XFRM_STATE_NOPMTUDISC flag

2005-06-20 13:21:43 -07:00

xfrm4_policy.c

[XFRM]: Handle DCCP in xfrm{4,6}_decode_session

2005-12-19 14:03:46 -08:00

xfrm4_state.c

[IPV4]: possible cleanups

2005-08-29 15:33:20 -07:00

xfrm4_tunnel.c

[NET]: Make ipip/ip6_tunnel independant of XFRM

2005-07-19 14:03:34 -07:00