Phil Sutter a0a9f33bdf net/ipv6: update flowi6_oif in ip6_dst_lookup_flow if not set ...

Newly created flows don't have flowi6_oif set (at least if the
associated socket is not interface-bound). This leads to a mismatch in
__xfrm6_selector_match() for policies which specify an interface in the
selector (sel->ifindex != 0).

Backtracing shows this happens in code-paths originating from e.g.
ip6_datagram_connect(), rawv6_sendmsg() or tcp_v6_connect(). (UDP was
not tested for.)

In summary, this patch fixes policy matching on outgoing interface for
locally generated packets.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: David S. Miller <davem@davemloft.net>

2015-07-20 12:59:32 -07:00

..

netfilter

netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.

2015-06-15 20:19:20 +02:00

addrconf_core.c

ipv6: fix possible use after free of dev stats

2015-06-08 12:12:45 -07:00

addrconf.c

ipv6: Remove unused arguments for __ipv6_dev_get_saddr().

2015-07-16 01:00:56 -07:00

addrlabel.c

netlink: implement nla_put_in_addr and nla_put_in6_addr

2015-03-31 13:58:35 -04:00

af_inet6.c

ipv6: Nonlocal bind

2015-07-09 21:09:10 -07:00

ah6.c

ipv6: coding style: comparison for equality with NULL

2015-03-31 13:51:54 -04:00

anycast.c

ipv6: coding style: comparison for equality with NULL

2015-03-31 13:51:54 -04:00

datagram.c

ipv6: use flag instead of u16 for hop in inet6_skb_parm

2015-07-09 15:06:59 -07:00

esp6.c

esp6: Switch to new AEAD interface

2015-05-28 11:23:20 +08:00

exthdrs_core.c

ipv6: coding style: comparison for equality with NULL

2015-03-31 13:51:54 -04:00

exthdrs_offload.c

ipv6: Fix exthdrs offload registration.

2014-03-06 16:35:55 -05:00

exthdrs.c

ipv6: use flag instead of u16 for hop in inet6_skb_parm

2015-07-09 15:06:59 -07:00

fib6_rules.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-04-06 22:34:15 -04:00

icmp.c

ipv6: Remove external dependency on rt6i_gateway and RTF_ANYCAST

2015-05-25 13:25:33 -04:00

inet6_connection_sock.c

net: convert syn_wait_lock to a spinlock

2015-03-23 16:52:26 -04:00

inet6_hashtables.c

inet: inet_twsk_deschedule factorization

2015-07-09 15:12:20 -07:00

ip6_checksum.c

udp: Generic functions to set checksum

2014-06-04 22:46:38 -07:00

ip6_fib.c

ipv6: Create percpu rt6_info

2015-05-25 13:25:35 -04:00

ip6_flowlabel.c

ipv6: Flow label state ranges

2015-05-03 21:58:01 -04:00

ip6_gre.c

ip6_gre: use netdev_alloc_pcpu_stats()

2015-04-22 15:39:05 -04:00

ip6_icmp.c

ipv6: White-space cleansing : Line Layouts

2014-08-24 22:37:52 -07:00

ip6_input.c

ipv6: Make MLD packets to only be processed locally

2015-07-03 09:52:38 -07:00

ip6_offload.c

ipv6: coding style: comparison for inequality with NULL

2015-03-31 13:51:54 -04:00

ip6_offload.h

ipv6: Pull IPv6 GSO registration out of the module

2012-11-15 17:39:24 -05:00

ip6_output.c

net/ipv6: update flowi6_oif in ip6_dst_lookup_flow if not set

2015-07-20 12:59:32 -07:00

ip6_tunnel.c

ipv6: Add rt6_get_cookie() function

2015-05-25 13:25:34 -04:00

ip6_udp_tunnel.c

net: Modify sk_alloc to not reference count the netns of kernel sockets.

2015-05-11 10:50:18 -04:00

ip6_vti.c

vti6: Add pmtu handling to vti6_xmit.

2015-06-01 16:03:43 -07:00

ip6mr.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

ipcomp6.c

ipv6: White-space cleansing : Structure layouts

2014-08-24 22:37:52 -07:00

ipv6_sockglue.c

ipv6: coding style: comparison for equality with NULL

2015-03-31 13:51:54 -04:00

Kconfig

net: Build IPv6 into kernel by default

2015-07-13 13:10:21 -07:00

Makefile

net: Export IGMP/MLD message validation code

2015-05-04 14:49:23 -04:00

mcast_snoop.c

net: fix two sparse warnings introduced by IGMP/MLD parsing exports

2015-05-04 19:19:54 -04:00

mcast.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

mip6.c

net: Convert LIMIT_NETDEBUG to net_dbg_ratelimited

2014-11-11 14:10:31 -05:00

ndisc.c

ipv6: Remove external dependency on rt6i_dst and rt6i_src

2015-05-25 13:25:32 -04:00

netfilter.c

netfilter: bridge: forward IPv6 fragmented packets

2015-06-12 14:10:12 +02:00

output_core.c

netfilter: don't pull include/linux/netfilter.h from netns headers

2015-06-18 21:14:31 +02:00

ping.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-03-09 23:38:02 -04:00

proc.c

udp: Increment UDP_MIB_IGNOREDMULTI for arriving unmatched multicasts

2014-11-07 15:45:50 -05:00

protocol.c

net: Export inet_offloads and inet6_offloads

2014-09-19 17:15:31 -04:00

raw.c

ipv6: Nonlocal bind

2015-07-09 21:09:10 -07:00

reassembly.c

ipv6: coding style: comparison for inequality with NULL

2015-03-31 13:51:54 -04:00

route.c

net-ipv6: Delete an unnecessary check before the function call "free_percpu"

2015-07-03 09:27:42 -07:00

sit.c

ipv6: call iptunnel_xmit with NULL sock pointer if no tunnel sock is available

2015-04-08 12:09:43 -04:00

syncookies.c

tcp: get_cookie_sock() consolidation

2015-06-07 15:19:52 -07:00

sysctl_net_ipv6.c

ipv6: Nonlocal bind

2015-07-09 21:09:10 -07:00

tcp_ipv6.c

inet: inet_twsk_deschedule factorization

2015-07-09 15:12:20 -07:00

tcpv6_offload.c

tcp: cleanup static functions

2015-02-28 16:56:51 -05:00

tunnel6.c

ipv6: White-space cleansing : gaps between function and symbol export

2014-08-24 22:37:52 -07:00

udp_impl.h

net: Remove iocb argument from sendmsg and recvmsg

2015-03-02 13:06:31 -05:00

udp_offload.c

ipv6: hash net ptr into fragmentation bucket selection

2015-03-25 14:07:04 -04:00

udp.c

udp: fix behavior of wrong checksums

2015-05-31 21:42:18 -07:00

udplite.c

net: Eliminate no_check from protosw

2014-05-23 16:28:53 -04:00

xfrm6_input.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

xfrm6_mode_beet.c

xfrm: simplify xfrm_address_t use

2015-03-31 13:58:35 -04:00

xfrm6_mode_ro.c

ipv4/ipv6: Fix FSF address in file headers

2013-12-06 12:37:56 -05:00

xfrm6_mode_transport.c

[IPSEC]: Use IPv6 calling convention as the convention for x->mode->output

2007-10-10 16:55:54 -07:00

xfrm6_mode_tunnel.c

xfrm6: Remove xfrm_tunnel_notifier

2014-03-14 07:28:08 +01:00

xfrm6_output.c

netfilter: Pass socket pointer down through okfn().

2015-04-07 15:25:55 -04:00

xfrm6_policy.c

ipv6: Add rt6_get_cookie() function

2015-05-25 13:25:34 -04:00

xfrm6_protocol.c

xfrm6: Properly handle unsupported protocols

2014-05-06 07:08:38 +02:00

xfrm6_state.c

ipv6: White-space cleansing : Line Layouts

2014-08-24 22:37:52 -07:00

xfrm6_tunnel.c

ipv6: White-space cleansing : gaps between function and symbol export

2014-08-24 22:37:52 -07:00