kernel/git/stable/linux.git/include/net, branch linux-2.6.13.y

[PATCH] ipvs: ip_vs_ftp breaks connections using persistence

2005-10-03T23:27:18+00:00

ip_vs_ftp when loaded can create NAT connections with unknown client port for passive FTP. For such expectations we lookup with cport=0 on incoming packet but it matches the format of the persistence templates causing packets to other persistent virtual servers to be forwarded to real server without creating connection. Later the reply packets are treated as foreign and not SNAT-ed. If the IPVS box serves both FTP and other services (eg. HTTP) for the time we wait for first packet for the FTP data connections with unknown client port (there can be many), other HTTP connections that have nothing common to the FTP conn break, i.e. HTTP client sends SYN to the virtual IP but the SYN+ACK is not NAT-ed properly in IPVS box and the client box returns RST to real server IP. I.e. the result can be 10% broken HTTP traffic if 10% of the time there are passive FTP connections in connecting state. It hurts only IPVS connections. This patch changes the connection lookup for packets from clients: * introduce IP_VS_CONN_F_TEMPLATE connection flag to mark the connection as template * create new connection lookup function just for templates - ip_vs_ct_in_get * make sure ip_vs_conn_in_get hits only connections with IP_VS_CONN_F_NO_CPORT flag set when s_port is 0. By this way we avoid returning template when looking for cport=0 (ftp) Signed-off-by: Julian Anastasov Signed-off-by: Chris Wright

[PATCH] 32bit sendmsg() flaw (CAN-2005-2490)

2005-09-10T02:42:53+00:00

When we copy 32bit ->msg_control contents to kernel, we walk the same userland data twice without sanity checks on the second pass. Second version of this patch: the original broke with 64-bit arches running 32-bit-compat-mode executables doing sendmsg() syscalls with unaligned CMSG data areas Another thing is that we use kmalloc() to allocate and sock_kfree_s() to free afterwards; less serious, but also needs fixing. Patch by Al Viro, David Miller, David Woodhouse (sparc64 clean compile fix from David Miller) Signed-off-by: Al Viro Signed-off-by: David Woodhouse Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman

[AX25]: UID fixes

2005-08-23T17:11:45+00:00

o Brown paperbag bug - ax25_findbyuid() was always returning a NULL pointer as the result. Breaks ROSE completly and AX.25 if UID policy set to deny. o While the list structure of AX.25's UID to callsign mapping table was properly protected by a spinlock, it's elements were not refcounted resulting in a race between removal and usage of an element. Signed-off-by: Ralf Baechle DL5RB Signed-off-by: David S. Miller

[NET]: Fix socket bitop damage

2005-08-23T17:11:30+00:00

The socket flag cleanups that went into 2.6.12-rc1 are basically oring the flags of an old socket into the socket just being created. Unfortunately that one was just initialized by sock_init_data(), so already has SOCK_ZAPPED set. As the result zapped sockets are created and all incoming connection will fail due to this bug which again was carefully replicated to at least AX.25, NET/ROM or ROSE. In order to keep the abstraction alive I've introduced sock_copy_flags() to copy the socket flags from one sockets to another and used that instead of the bitwise copy thing. Anyway, the idea here has probably been to copy all flags, so sock_copy_flags() should be the right thing. With this the ham radio protocols are usable again, so I hope this will make it into 2.6.13. Signed-off-by: Ralf Baechle DL5RB Signed-off-by: David S. Miller

[Bluetooth] Remove unused functions and cleanup symbol exports

2005-08-06T10:36:51+00:00

This patch removes the unused bt_dump() function and it also removes its BT_DMP macro. It also unexports the hci_dev_get(), hci_send_cmd() and hci_si_event() functions. Signed-off-by: Adrian Bunk Signed-off-by: Marcel Holtmann

[NET]: Spelling mistakes threshoulds -> thresholds

2005-07-31T00:41:59+00:00

Just simple spelling mistake fixes. Signed-Off-By: Baruch Even Signed-off-by: David S. Miller

[NET]: Make ipip/ip6_tunnel independant of XFRM

2005-07-19T21:03:34+00:00

Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[SCTP]: Fix potential null pointer dereference while handling an icmp error

2005-07-18T20:44:10+00:00

Signed-off-by: Sridhar Samudrala Signed-off-by: David S. Miller

[NET]: __be'ify *_type_trans()

2005-07-12T19:08:43+00:00

tr_type_trans(), hippi_type_trans() left as-is. Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

[SCTP]: __nocast annotations

2005-07-12T03:57:47+00:00

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller