Nicolas Dichtel 1ee89bd0fe netfilter: discard overlapping IPv6 fragment ...

RFC5722 prohibits reassembling IPv6 fragments when some data overlaps.

Bug spotted by Zhang Zuotao <zuotao.zhang@6wind.com>.

Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2010-09-07 13:57:21 -07:00

..

ip6_queue.c

netfilter: ip6_queue: rwlock to spinlock conversion

2010-06-09 16:25:08 +02:00

ip6_tables.c

netfilter: fix CONFIG_COMPAT support

2010-08-23 14:41:22 -07:00

ip6t_ah.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6t_eui64.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6t_frag.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6t_hbh.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6t_ipv6header.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ip6t_LOG.c

netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header

2010-06-28 14:16:08 +02:00

ip6t_mh.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6t_REJECT.c

netfilter: ip6t_REJECT: fix a dst leak in ipv6 REJECT

2010-07-02 10:05:01 +02:00

ip6t_rt.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ip6table_filter.c

netfilter: cleanup printk messages

2010-05-13 15:02:08 +02:00

ip6table_mangle.c

netfilter: cleanup printk messages

2010-05-13 15:02:08 +02:00

ip6table_raw.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

ip6table_security.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

Kconfig

…

Makefile

…

nf_conntrack_l3proto_ipv6.c

netfilter: cleanup printk messages

2010-05-13 15:02:08 +02:00

nf_conntrack_proto_icmpv6.c

netfilter: nf_conntrack: IPS_UNTRACKED bit

2010-06-08 16:09:52 +02:00

nf_conntrack_reasm.c

netfilter: discard overlapping IPv6 fragment

2010-09-07 13:57:21 -07:00