Steffen Klassert b8c203b2d2 xfrm: Generate queueing routes only from route lookup functions ... Currently we genarate a queueing route if we have matching policies but can not resolve the states and the sysctl xfrm_larval_drop is disabled. Here we assume that dst_output() is called to kill the queued packets. Unfortunately this assumption is not true in all cases, so it is possible that these packets leave the system unwanted. We fix this by generating queueing routes only from the route lookup functions, here we can guarantee a call to dst_output() afterwards. Fixes: a0073fe18e ("xfrm: Add a state resolution packet queue") Reported-by: Konstantinos Kolelis <k.kolelis@sirrix.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>		2014-09-16 10:08:49 +02:00
..
6lowpan	6lowpan: Allow 6LoWPAN to be modular	2014-08-07 11:44:18 -07:00
9p
802
8021q	net: Always untag vlan-tagged traffic on input.	2014-08-11 12:16:51 -07:00
appletalk
atm	lec: Use rtnl lock/unlock when updating MTU	2014-08-21 16:31:23 -07:00
ax25
batman-adv	batman-adv: Fix parameter order of hlist_add_behind	2014-08-16 19:19:08 -07:00
bluetooth	Bluetooth: Fix hci_conn reference counting for auto-connections	2014-08-20 21:57:39 +03:00
bridge	bridge: Fix br_should_learn to check vlan_enabled	2014-09-15 17:38:30 -04:00
caif
can
ceph	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2014-08-13 17:43:29 -06:00
core	net: fix creation adjacent device symlinks	2014-09-15 14:24:53 -04:00
dcb	dcbnl : Fix misleading dcb_app->priority explanation	2014-07-30 17:21:05 -07:00
dccp
decnet
dns_resolver	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2014-08-06 08:06:39 -07:00
dsa
ethernet
hsr
ieee802154	ieee802154: 6lowpan: ensure MTU of 1280 for 6lowpan	2014-08-19 19:17:42 +02:00
ipv4	xfrm: Generate blackhole routes only from route lookup functions	2014-09-16 10:08:40 +02:00
ipv6	xfrm: Generate blackhole routes only from route lookup functions	2014-09-16 10:08:40 +02:00
ipx
irda	irda: Fix rd_frame control field initialization in irlap_send_rd_frame()	2014-08-13 20:05:52 -07:00
iucv	af_iucv: avoid path quiesce of severed path in shutdown()	2014-07-21 20:21:40 -07:00
key
l2tp	l2tp: fix race while getting PMTU on PPP pseudo-wire	2014-09-05 14:40:18 -07:00
lapb
llc
mac80211	Two more fixes for mac80211 - one of them addresses a long-standing	2014-09-09 14:29:36 -04:00
mac802154	ieee802154: mac802154: handle the reserved dest mode by dropping the packet	2014-08-19 19:17:41 +02:00
mpls
netfilter	netfilter: add explicit Kconfig for NETFILTER_XT_NAT	2014-09-05 17:23:31 -07:00
netlabel	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2014-08-06 09:38:14 -07:00
netlink	netlink: Annotate RCU locking for seq_file walker	2014-08-14 15:13:40 -07:00
netrom
nfc	Merge tag 'master-2014-07-31' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next	2014-08-05 13:18:20 -07:00
openvswitch	openvswitch: distinguish between the dropped and consumed skb	2014-09-03 20:50:51 -07:00
packet	packet: handle too big packets for PACKET_V3	2014-08-21 16:44:28 -07:00
phonet
rds
rfkill	net: rfkill: gpio: Add more Broadcom bluetooth ACPI IDs	2014-08-25 15:39:23 -04:00
rose
rxrpc	RxRPC: Fix missing __user annotation	2014-09-09 20:39:40 -07:00
sched	cbq: now_rt removal	2014-08-19 10:58:44 -07:00
sctp	net: sctp: fix ABI mismatch through sctp_assoc_to_state helper	2014-08-29 20:31:08 -07:00
sunrpc	NFS client updates for Linux 3.17	2014-08-13 18:13:19 -06:00
tipc	tipc: Fix build.	2014-08-19 11:16:38 -07:00
unix
vmw_vsock
wimax
wireless	nl80211: clear skb cb before passing to netlink	2014-09-03 11:13:14 +02:00
x25
xfrm	xfrm: Generate queueing routes only from route lookup functions	2014-09-16 10:08:49 +02:00
compat.c	net: sendmsg: fix NULL pointer dereference	2014-07-29 12:20:22 -07:00
Kconfig
Makefile
nonet.c
socket.c	net:socket: set msg_namelen to 0 if msg_name is passed as NULL in msghdr struct from userland.	2014-09-09 17:35:46 -07:00
sysctl_net.c