Davide Caratti e3ccad57ac flow_dissector: fix TTL and TOS dissection on IPv4 fragments ... [ Upstream commit d2126838050ccd1dadf310ffb78b2204f3b032b9 ] the following command: # tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \ $tcflags dst_ip 192.0.2.2 ip_ttl 63 action drop doesn't drop all IPv4 packets that match the configured TTL / destination address. In particular, if "fragment offset" or "more fragments" have non zero value in the IPv4 header, setting of FLOW_DISSECTOR_KEY_IP is simply ignored. Fix this dissecting IPv4 TTL and TOS before fragment info; while at it, add a selftest for tc flower's match on 'ip_ttl' that verifies the correct behavior. Fixes: 518d8a2e9b ("net/flow_dissector: add support for dissection of misc ip header fields") Reported-by: Shuang Li <shuali@redhat.com> Signed-off-by: Davide Caratti <dcaratti@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-04-07 15:00:07 +02:00
..
bpf_sk_storage.c	bpf: Change bpf_sk_storage_*() to accept ARG_PTR_TO_BTF_ID_SOCK_COMMON	2020-09-25 13:58:01 -07:00
datagram.c	udp: fix skb_copy_and_csum_datagram with odd segment sizes	2021-02-17 11:02:28 +01:00
datagram.h
dev_addr_lists.c	net: core: add nested_level variable in net_device	2020-09-28 15:00:15 -07:00
dev_ioctl.c	net: fix dev_ifsioc_locked() race condition	2021-03-07 12:34:07 +01:00
dev.c	can: dev: Move device back to init netns on owning netns delete	2021-03-30 14:32:08 +02:00
devlink.c	net: core: devlink: use right genl user_ptr when handling port param get/set	2021-01-27 11:55:26 +01:00
drop_monitor.c	drop_monitor: Perform cleanup upon probe registration failure	2021-03-30 14:31:57 +02:00
dst_cache.c
dst.c	net, bpf: Fix ip6ip6 crash with collect_md populated skbs	2021-03-30 14:32:05 +02:00
failover.c
fib_notifier.c
fib_rules.c	fib: fix fib_rule_ops indirect call wrappers when CONFIG_IPV6=m	2020-09-08 20:09:08 -07:00
filter.c	bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx	2021-03-04 11:37:33 +01:00
flow_dissector.c	flow_dissector: fix TTL and TOS dissection on IPv4 fragments	2021-04-07 15:00:07 +02:00
flow_offload.c	net: flow_offload: Fix memory leak for indirect flow block	2020-12-09 16:08:33 -08:00
gen_estimator.c	net_sched: gen_estimator: support large ewma log	2021-01-27 11:55:23 +01:00
gen_stats.c
gro_cells.c	gro_cells: reduce number of synchronize_net() calls	2020-11-25 11:28:12 -08:00
hwbm.c
link_watch.c
lwt_bpf.c	lwt_bpf: Replace preempt_disable() with migrate_disable()	2020-12-07 11:53:40 -08:00
lwtunnel.c
Makefile
neighbour.c	neighbour: Prevent a dead entry from updating gc_list	2021-02-10 09:29:22 +01:00
net_namespace.c	bpf, net: Rework cookie generator as per-cpu one	2020-09-30 11:50:35 -07:00
net-procfs.c	net-sysfs: add backlog len and CPU id to softnet data	2020-09-21 13:56:37 -07:00
net-sysfs.c	net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc	2021-01-12 20:18:11 +01:00
net-sysfs.h
net-traces.c
netclassid_cgroup.c
netevent.c
netpoll.c	net: Have netpoll bring-up DSA management interface	2020-11-18 11:04:11 -08:00
netprio_cgroup.c
page_pool.c
pktgen.c	pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()	2021-03-07 12:34:09 +01:00
ptp_classifier.c	ptp: Add generic ptp v2 header parsing function	2020-08-19 16:07:49 -07:00
request_sock.c
rtnetlink.c	net: fix dev_ifsioc_locked() race condition	2021-03-07 12:34:07 +01:00
scm.c
secure_seq.c
skbuff.c	net: fix up truesize of cloned skb in skb_prepare_for_shift()	2021-03-07 12:34:05 +01:00
skmsg.c	bpf, sockmap: Avoid failures from skb_to_sgvec when skb has frag_list	2020-11-18 00:14:04 +01:00
sock_diag.c	bpf, net: Rework cookie generator as per-cpu one	2020-09-30 11:50:35 -07:00
sock_map.c	net, sockmap: Don't call bpf_prog_put() on NULL pointer	2020-10-15 21:05:23 +02:00
sock_reuseport.c	udp: Prevent reuseport_select_sock from reading uninitialized socks	2021-01-23 16:03:59 +01:00
sock.c	net: Properly typecast int values to set sk_max_pacing_rate	2020-10-22 12:18:25 -07:00
stream.c
sysctl_net_core.c	net: add option to not create fall-back tunnels in root-ns as well	2020-08-28 06:52:44 -07:00
timestamping.c
tso.c
utils.c
xdp.c	xdp: Remove the xdp_attachment_flags_ok() callback	2020-12-09 16:27:42 +01:00