)]}' { "log": [ { "commit": "2685b267bce34c9b66626cb11664509c32a761a5", "tree": "ce8b4ad47b4a1aa1b0e7634298d63c4cb0ca46c5", "parents": [ "4522d58275f124105819723e24e912c8e5bf3cdd", "272491ef423b6976a230a998b10f46976aa91342" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.osdl.org", "time": "Thu Dec 07 09:05:15 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.osdl.org", "time": "Thu Dec 07 09:05:15 2006 -0800" }, "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\n* master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6: (48 commits)\n [NETFILTER]: Fix non-ANSI func. decl.\n [TG3]: Identify Serdes devices more clearly.\n [TG3]: Use msleep.\n [TG3]: Use netif_msg_*.\n [TG3]: Allow partial speed advertisement.\n [TG3]: Add TG3_FLG2_IS_NIC flag.\n [TG3]: Add 5787F device ID.\n [TG3]: Fix Phy loopback.\n [WANROUTER]: Kill kmalloc debugging code.\n [TCP] inet_twdr_hangman: Delete unnecessary memory barrier().\n [NET]: Memory barrier cleanups\n [IPSEC]: Fix inetpeer leak in ipv4 xfrm dst entries.\n audit: disable ipsec auditing when CONFIG_AUDITSYSCALL\u003dn\n audit: Add auditing to ipsec\n [IRDA] irlan: Fix compile warning when CONFIG_PROC_FS\u003dn\n [IrDA]: Incorrect TTP header reservation\n [IrDA]: PXA FIR code device model conversion\n [GENETLINK]: Fix misplaced command flags.\n [NETLIK]: Add a pointer to the Generic Netlink wiki page.\n [IPV6] RAW: Don\u0027t release unlocked sock.\n ...\n" }, { "commit": "e18b890bb0881bbab6f4f1a6cd20d9c60d66b003", "tree": "4828be07e1c24781c264b42c5a75bcd968223c3f", "parents": [ "441e143e95f5aa1e04026cb0aa71c801ba53982f" ], "author": { "name": "Christoph Lameter", "email": "clameter@sgi.com", "time": "Wed Dec 06 20:33:20 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.osdl.org", "time": "Thu Dec 07 08:39:25 2006 -0800" }, "message": "[PATCH] slab: remove kmem_cache_t\n\nReplace all uses of kmem_cache_t with struct kmem_cache.\n\nThe patch was generated using the following script:\n\n\t#!/bin/sh\n\t#\n\t# Replace one string by another in all the kernel sources.\n\t#\n\n\tset -e\n\n\tfor file in `find * -name \"*.c\" -o -name \"*.h\"|xargs grep -l $1`; do\n\t\tquilt add $file\n\t\tsed -e \"1,\\$s/$1/$2/g\" $file \u003e/tmp/$$\n\t\tmv /tmp/$$ $file\n\t\tquilt refresh\n\tdone\n\nThe script was run like this\n\n\tsh replace kmem_cache_t \"struct kmem_cache\"\n\nSigned-off-by: Christoph Lameter \u003cclameter@sgi.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "54e6ecb23951b195d02433a741c7f7cb0b796c78", "tree": "c8885c49f37c8d383945b8af69d51597494ed62c", "parents": [ "f7267c0c0721fd02ad3dc37c3d6dd24ccd81d4d6" ], "author": { "name": "Christoph Lameter", "email": "clameter@sgi.com", "time": "Wed Dec 06 20:33:16 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.osdl.org", "time": "Thu Dec 07 08:39:24 2006 -0800" }, "message": "[PATCH] slab: remove SLAB_ATOMIC\n\nSLAB_ATOMIC is an alias of GFP_ATOMIC\n\nSigned-off-by: Christoph Lameter \u003cclameter@sgi.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "a120586873d3d64de93bd6d593d237e131994e58", "tree": "ae284884e23268e867f748a2ab52353cf2390e89", "parents": [ "b30973f877fea1a3fb84e05599890fcc082a88e5" ], "author": { "name": "Alan Stern", "email": "stern@rowland.harvard.edu", "time": "Wed Dec 06 20:32:37 2006 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.osdl.org", "time": "Thu Dec 07 08:39:22 2006 -0800" }, "message": "[PATCH] Allow NULL pointers in percpu_free\n\nThe patch (as824b) makes percpu_free() ignore NULL arguments, as one would\nexpect for a deallocation routine. (Note that free_percpu is #defined as\npercpu_free in include/linux/percpu.h.) A few callers are updated to remove\nnow-unneeded tests for NULL. A few other callers already seem to assume\nthat passing a NULL pointer to percpu_free() is okay!\n\nThe patch also removes an unnecessary NULL check in percpu_depopulate().\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n" }, { "commit": "4e33fa14faecc150e97c0e4f2320745bdc7b7112", "tree": "1359902f5a43b3621098d2bac6a7b209ca0da141", "parents": [ "9a217a1c7e7f36ec4996314d64267dd711dbd9bf" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Tue Dec 05 13:48:27 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Dec 06 18:39:09 2006 -0800" }, "message": "[IPV6] RAW: Don\u0027t release unlocked sock.\n\nWhen user builds IPv6 header and send it through raw socket, kernel\ntries to release unlocked sock. (Kernel log shows\n\"BUG: bad unlock balance detected\" with enabled debug option.)\n\nThe lock is held only for non-hdrincl sock in this function\nthen this patch fix to do nothing about lock for hdrincl one.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9a217a1c7e7f36ec4996314d64267dd711dbd9bf", "tree": "3da4cf974d9dca5cfbde33d7df2808860d801434", "parents": [ "5c804bfdcca2593422dd6edc2d7db4dba645543c" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Dec 05 13:47:21 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Dec 06 18:39:08 2006 -0800" }, "message": "[IPV6]: Repair IPv6 Fragments\n\nThe commit \"[IPV6]: Use kmemdup\" (commit-id:\naf879cc704372ef762584e916129d19ffb39e844) broke IPv6 fragments.\n\nBug was spotted by Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "74c9c0c17dea729d6089c0c82762babd02e65f84", "tree": "fa3c59bcd8121b469013b49963fb561f0fa30903", "parents": [ "79066ad32be5bb2edf16733aec36acf2af03fc99" ], "author": { "name": "Dmitry Mishin", "email": "dim@openvz.org", "time": "Tue Dec 05 13:43:50 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Dec 06 18:39:02 2006 -0800" }, "message": "[NETFILTER]: Fix {ip,ip6,arp}_tables hook validation\n\nCommit 590bdf7fd2292b47c428111cb1360e312eff207e introduced a regression\nin match/target hook validation. mark_source_chains builds a bitmask\nfor each rule representing the hooks it can be reached from, which is\nthen used by the matches and targets to make sure they are only called\nfrom valid hooks. The patch moved the match/target specific validation\nbefore the mark_source_chains call, at which point the mask is always zero.\n\nThis patch returns back to the old order and moves the standard checks\nto mark_source_chains. This allows to get rid of a special case for\nstandard targets as a nice side-effect.\n\nSigned-off-by: Dmitry Mishin \u003cdim@openvz.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a3c479772c9f4239749950e7c8ea0e9c914a9d7e", "tree": "a6996d42891dafb46b6fcb19eb797ad092b7767a", "parents": [ "807467c22a12381985878be23c778657fc0364d0" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Dec 02 22:11:01 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Dec 02 22:11:01 2006 -0800" }, "message": "[NETFILTER]: Mark old IPv4-only connection tracking scheduled for removal\n\nAlso remove the references to \"new connection tracking\" from Kconfig.\nAfter some short stabilization period of the new connection tracking\nhelpers/NAT code the old one will be removed.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bff9a89bcac5b68ac0a1ea856b1726a35ae1eabb", "tree": "188356d5411849c8d7b1a36dcb3223373a0bbb68", "parents": [ "f9aae95828d3478520f4bd73221bcb450ec1a5c0" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Dec 02 22:05:08 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Dec 02 22:05:08 2006 -0800" }, "message": "[NETFILTER]: nf_conntrack: endian annotations\n\nResync with Al Viro\u0027s ip_conntrack annotations and fix a missed\nspot in ip_nat_proto_icmp.c.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b6332e6cf9c9198c0f3b0fe37c2c57514dafe1b8", "tree": "89eac69c7b6389f6ef55288239bcf41daac52a3e", "parents": [ "f5b99bcdddfb2338227faad3489c24907f37ee8e" ], "author": { "name": "Andrew Morton", "email": "akpm@osdl.org", "time": "Thu Nov 30 19:16:28 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:31:52 2006 -0800" }, "message": "[TCP]: Fix warnings with TCP_MD5SIG disabled.\n\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f5b99bcdddfb2338227faad3489c24907f37ee8e", "tree": "ab12dd443300df741e388ca80df0860dc65d24b0", "parents": [ "2718aa7c55ba7264dd463b8f7006f0975366fa7b" ], "author": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Thu Nov 30 17:22:29 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:31:51 2006 -0800" }, "message": "[NET]: Possible cleanups.\n\nThis patch contains the following possible cleanups:\n- make the following needlessly global functions statis:\n - ipv4/tcp.c: __tcp_alloc_md5sig_pool()\n - ipv4/tcp_ipv4.c: tcp_v4_reqsk_md5_lookup()\n - ipv4/udplite.c: udplite_rcv()\n - ipv4/udplite.c: udplite_err()\n- make the following needlessly global structs static:\n - ipv4/tcp_ipv4.c: tcp_request_sock_ipv4_ops\n - ipv4/tcp_ipv4.c: tcp_sock_ipv4_specific\n - ipv6/tcp_ipv6.c: tcp_request_sock_ipv6_ops\n- net/ipv{4,6}/udplite.c: remove inline\u0027s from static functions\n (gcc should know best when to inline them)\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "76592584be7828cd314bc8d5dc7773ff1692fb99", "tree": "a0849035a07a9128ebccb3aa8aea17ba9e237d13", "parents": [ "65195686ff2f088a73c1764f4d30be5c7e0eb089" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Nov 29 02:35:42 2006 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:31:34 2006 -0800" }, "message": "[NETFILTER]: Fix PROC_FS\u003dn warnings\n\nFix some unused function/variable warnings.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "baf7b1e11282127e068d149825cccec002091d61", "tree": "33eae4a25dad2666e5b51bffb76d5c7d2db725c2", "parents": [ "39b46fc6f0d1161a5585cd8af7b3a05e8118ab7e" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Nov 29 02:35:38 2006 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:31:31 2006 -0800" }, "message": "[NETFILTER]: x_tables: add NFLOG target\n\nAdd new NFLOG target to allow use of nfnetlink_log for both IPv4 and IPv6.\nCurrently we have two (unsupported by userspace) hacks in the LOG and ULOG\ntargets to optionally call to the nflog API. They lack a few features,\nnamely the IPv4 and IPv6 LOG targets can not specify a number of arguments\nrelated to nfnetlink_log, while the ULOG target is only available for IPv4.\nRemove those hacks and add a clean way to use nfnetlink_log.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "933a41e7e12b773d1dd026018f02b86b5d257a22", "tree": "0a99f7759d2488869f93ba6a0206435bcacca85e", "parents": [ "d62f9ed4a490309bd9e5df0b42ba5d096e7b5902" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Nov 29 02:35:18 2006 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:31:18 2006 -0800" }, "message": "[NETFILTER]: nf_conntrack: move conntrack protocol sysctls to individual modules\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "f8eb24a89afa12b48fa7e39775faea6d64b8e538", "tree": "cab6364c9155bebad3b20a8125c7b2a086c36356", "parents": [ "d73468533451fd896324058d9ba649c11ba3e3ee" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Nov 29 02:35:15 2006 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:31:16 2006 -0800" }, "message": "[NETFILTER]: nf_conntrack: move extern declaration to header files\n\nUsing extern in a C file is a bad idea because the compiler can\u0027t\ncatch type errors.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "605dcad6c85226e6d43387917b329d65b95cef39", "tree": "e18d19e93a9c1dcf268fb1ed8e91246c3440ba5b", "parents": [ "e2b7606cdb602a4f69c02cfc8bebe9c63b595e24" ], "author": { "name": "Martin Josefsson", "email": "gandalf@wlug.westbo.se", "time": "Wed Nov 29 02:35:06 2006 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:31:09 2006 -0800" }, "message": "[NETFILTER]: nf_conntrack: rename struct nf_conntrack_protocol\n\nRename \u0027struct nf_conntrack_protocol\u0027 to \u0027struct nf_conntrack_l4proto\u0027 in\norder to help distinguish it from \u0027struct nf_conntrack_l3proto\u0027. It gets\nrather confusing with \u0027nf_conntrack_protocol\u0027.\n\nSigned-off-by: Martin Josefsson \u003cgandalf@wlug.westbo.se\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "4c0a6cb0db19de411c4bf7fcdc79d4c7c4ccafb1", "tree": "e7f793f8d259df2a37fa975325c25961a5d3e14b", "parents": [ "e3703b3de1f049b38733ba520e5038f23063068e" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Mon Nov 27 09:29:59 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:30:45 2006 -0800" }, "message": "[UDP(-Lite)]: consolidate v4 and v6 get|setsockopt code\n\nThis patch consolidates set/getsockopt code between UDP(-Lite) v4 and 6. The\njustification is that UDP(-Lite) is a transport-layer protocol and therefore\nthe socket option code (at least in theory) should be AF-independent.\n\nFurthermore, there is the following code reduplication:\n * do_udp{,v6}_getsockopt is 100% identical between v4 and v6\n * do_udp{,v6}_setsockopt is identical up to the following differerence\n\t--v4 in contrast to v4 additionally allows the experimental encapsulation\n types UDP_ENCAP_ESPINUDP and UDP_ENCAP_ESPINUDP_NON_IKE\n\t--the remainder is identical between v4 and v6\n I believe that this difference is of little relevance.\n\nThe advantages in not duplicating twice almost completely identical code.\n\nThe patch further simplifies the interface of udp{,v6}_push_pending_frames,\nsince for the second argument (struct udp_sock *up) it always holds that\nup \u003d udp_sk(sk); where sk is the first function argument.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e3703b3de1f049b38733ba520e5038f23063068e", "tree": "3566516bc8b87c8c8d78b0c3287761c8e2f49a2b", "parents": [ "4e9b82693542003b028c8494e9e3c49615b91ce7" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Mon Nov 27 09:27:07 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:30:44 2006 -0800" }, "message": "[RTNETLINK]: Add rtnl_put_cacheinfo() to unify some code\n\nIPv4, IPv6, and DECNet all use struct rta_cacheinfo in a similiar\nway, therefore rtnl_put_cacheinfo() is added to reuse code.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "107a5fe6191249878de0de42bb64d3c35be1a986", "tree": "baecf23708782511699974240f20e793ca688556", "parents": [ "6fb32ddeb2502292bb89e17f58600ce265598ed7" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Fri Nov 24 17:08:58 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:30:27 2006 -0800" }, "message": "[IPV6]: Improve IPv6 tunnel error reporting\n\nLog an error if the remote tunnel endpoint is unable to handle\ntunneled packets.\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6fb32ddeb2502292bb89e17f58600ce265598ed7", "tree": "4870680606e4dad418c52de2cd5a842ce53fed2c", "parents": [ "305d4b3ce8c2f00643edc3bb19f005f72e8f84fc" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Fri Nov 24 17:08:32 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:30:26 2006 -0800" }, "message": "[IPV6]: Don\u0027t allocate memory for Tunnel Encapsulation Limit Option\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "305d4b3ce8c2f00643edc3bb19f005f72e8f84fc", "tree": "c004e115441d3a0ce8fc03ff7a39def0114df2d5", "parents": [ "09c6bbf090ecb52c8d670fa4d5730be134a8ec8b" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Fri Nov 24 17:06:53 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:30:25 2006 -0800" }, "message": "[IPV6]: Allow link-local tunnel endpoints\n\nAllow link-local tunnel endpoints if the underlying link is defined.\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "09c6bbf090ecb52c8d670fa4d5730be134a8ec8b", "tree": "3ae488ac005b0847aeab4a03c4fdd38607c38d71", "parents": [ "567131a722ca064c917c0b06e4bcf07d47602103" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Fri Nov 24 17:06:27 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:30:24 2006 -0800" }, "message": "[IPV6]: Do mandatory IPv6 tunnel endpoint checks in realtime\n\nDoing the mandatory tunnel endpoint checks when the tunnel is set up\nisn\u0027t enough as interfaces can go up or down and addresses can be\nadded or deleted after this. The checks need to be done realtime when\nthe tunnel is processing a packet.\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "567131a722ca064c917c0b06e4bcf07d47602103", "tree": "d249b39f0c05aedeb3873a897151b47913632eee", "parents": [ "e94ef682053a6eeca91aefdaecf8efe7fd7e33a5" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Fri Nov 24 17:05:41 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:30:24 2006 -0800" }, "message": "[IPV6]: Fix SIOCCHGTUNNEL bug in IPv6 tunnels\n\nA logic bug in tunnel lookup could result in duplicate tunnels when\nchanging an existing device.\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ff1dcadb1b55dbf471c5ed109dbbdf06bd19ef3b", "tree": "cbcd17d33ecc52c90d218b43c5aec430be448058", "parents": [ "5b14027bf2132c0631ea9f3be11ced89a5057220" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Nov 20 18:07:29 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:27:18 2006 -0800" }, "message": "[NET]: Split skb-\u003ecsum\n\n... into anonymous union of __wsum and __u32 (csum and csum_offset resp.)\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8e5200f54062b8af0ed1d186ea0f113854786d89", "tree": "71e00b21ae4f8410413f70141aa275529dbbfb84", "parents": [ "34bcca28335977e969338c98c6c43a1e08f592b2" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Nov 20 18:06:37 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:27:16 2006 -0800" }, "message": "[NET]: Fix assorted misannotations (from md5 and udplite merges).\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "89c89458152c4d387eeca6532b6e50780fc59f8b", "tree": "3c893308b4da045b44a9df06300e3ff8a3ce38d8", "parents": [ "1459bb36b12ac52bde68d70e2ba7a6f1f2e8be17" ], "author": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Mon Nov 20 16:56:48 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:26:15 2006 -0800" }, "message": "[IPV6] net/ipv6/sit.c: make 2 functions static\n\nThis patch makes two needlessly global functions static.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "af879cc704372ef762584e916129d19ffb39e844", "tree": "09b9cdb70bd6038513792b647b1c93332ce8ee14", "parents": [ "c67862403e28dd67f38e896736f063d8dd522688" ], "author": { "name": "Arnaldo Carvalho de Melo", "email": "acme@mandriva.com", "time": "Fri Nov 17 12:14:37 2006 -0200" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:23:58 2006 -0800" }, "message": "[IPV6]: Use kmemdup\n\nCode diff stats:\n\n[acme@newtoy net-2.6.20]$ codiff /tmp/ipv6.ko.before /tmp/ipv6.ko.after\n/pub/scm/linux/kernel/git/acme/net-2.6.20/net/ipv6/ip6_output.c:\n ip6_output | -52\n ip6_append_data | +2\n 2 functions changed, 2 bytes added, 52 bytes removed\n\n/pub/scm/linux/kernel/git/acme/net-2.6.20/net/ipv6/addrconf.c:\n addrconf_sysctl_register | -27\n 1 function changed, 27 bytes removed\n\n/pub/scm/linux/kernel/git/acme/net-2.6.20/net/ipv6/tcp_ipv6.c:\n tcp_v6_syn_recv_sock | -32\n tcp_v6_parse_md5_keys | -24\n 2 functions changed, 56 bytes removed\n\n/tmp/ipv6.ko.after:\n 5 functions changed, 2 bytes added, 135 bytes removed\n[acme@newtoy net-2.6.20]$\n\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@mandriva.com\u003e\n" }, { "commit": "7d9e9b3df491d5e1c3ed76c5cff7ace6094124c1", "tree": "6a88d03b005f64fcaf4ef0e98a43f86cde12d6a9", "parents": [ "7d533f941856d7d192bfec28581e130dda9c6688" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Nov 14 22:09:20 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:23:46 2006 -0800" }, "message": "[IPV6]: udp.c build fix\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f6ab028804bdc580fe0915494dbf31f5ea473ca7", "tree": "4bf0fedcfaab7103682bc6209f196104fa9df8fb", "parents": [ "b51655b958dfb1176bfcf99466231fdbef8751ff" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Thu Nov 16 02:36:50 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:23:39 2006 -0800" }, "message": "[NET]: Make mangling a checksum (0 -\u003e 0xffff on the wire) explicit.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b51655b958dfb1176bfcf99466231fdbef8751ff", "tree": "a53d0ec00d8db4169ba8c1c487fffbd34d6dde03", "parents": [ "b1550f221255f7dd06048d832bf0f3d166840e1c" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Nov 14 21:40:42 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:23:38 2006 -0800" }, "message": "[NET]: Annotate __skb_checksum_complete() and friends.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5f92a7388a29594d6c365b23a48d4bb8299a3ea7", "tree": "569e888e3b87dd77fa3eafa36dac96f2e1da00c5", "parents": [ "5084205faf45384fff25c4cf77dd5c96279283ad" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Nov 14 21:36:54 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:23:34 2006 -0800" }, "message": "[NET]: Annotate callers of the reset of checksum.h stuff.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "868c86bcb5bdea7ed8d45979b17bb919af9254db", "tree": "ebc232092d6a8a75261a9e3f698206cc09740fdf", "parents": [ "2bda2853150e20ca2a44627d00b5f85af0b24a42" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Nov 14 21:35:48 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:23:31 2006 -0800" }, "message": "[NET]: annotate csum_ipv6_magic() callers in net/*\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e69a4adc669fe210817ec50ae3f9a7a5ad62d4e8", "tree": "de4666cd772f02aac4cbacf11251faeb54e99d1d", "parents": [ "b09b845ca6724c3bbdc00c0cb2313258c7189ca9" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Tue Nov 14 20:56:00 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:52 2006 -0800" }, "message": "[IPV6]: Misc endianness annotations.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ba4e58eca8aa9473b44fdfd312f26c4a2e7798b3", "tree": "700f8f989f48da480beb83b983637cfd2b5a3f67", "parents": [ "6051e2f4fb68fc8e5343db58fa680ece376f405c" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Mon Nov 27 11:10:57 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:46 2006 -0800" }, "message": "[NET]: Supporting UDP-Lite (RFC 3828) in Linux\n\nThis is a revision of the previously submitted patch, which alters\nthe way files are organized and compiled in the following manner:\n\n\t* UDP and UDP-Lite now use separate object files\n\t* source file dependencies resolved via header files\n\t net/ipv{4,6}/udp_impl.h\n\t* order of inclusion files in udp.c/udplite.c adapted\n\t accordingly\n\n[NET/IPv4]: Support for the UDP-Lite protocol (RFC 3828)\n\nThis patch adds support for UDP-Lite to the IPv4 stack, provided as an\nextension to the existing UDPv4 code:\n * generic routines are all located in net/ipv4/udp.c\n * UDP-Lite specific routines are in net/ipv4/udplite.c\n * MIB/statistics support in /proc/net/snmp and /proc/net/udplite\n * shared API with extensions for partial checksum coverage\n\n[NET/IPv6]: Extension for UDP-Lite over IPv6\n\nIt extends the existing UDPv6 code base with support for UDP-Lite\nin the same manner as per UDPv4. In particular,\n * UDPv6 generic and shared code is in net/ipv6/udp.c\n * UDP-Litev6 specific extensions are in net/ipv6/udplite.c\n * MIB/statistics support in /proc/net/snmp6 and /proc/net/udplite6\n * support for IPV6_ADDRFORM\n * aligned the coding style of protocol initialisation with af_inet6.c\n * made the error handling in udpv6_queue_rcv_skb consistent;\n to return `-1\u0027 on error on all error cases\n * consolidation of shared code\n\n[NET]: UDP-Lite Documentation and basic XFRM/Netfilter support\n\nThe UDP-Lite patch further provides\n * API documentation for UDP-Lite\n * basic xfrm support\n * basic netfilter support for IPv4 and IPv6 (LOG target)\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6051e2f4fb68fc8e5343db58fa680ece376f405c", "tree": "b061f38f00100e40a3c5b9f33e3acb58c5aa3e7b", "parents": [ "04561c1fe7b067a8250e6caaf168256783580c4c" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Tue Nov 14 19:54:19 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:45 2006 -0800" }, "message": "[IPv6] prefix: Convert RTM_NEWPREFIX notifications to use the new netlink api\n\nRTM_GETPREFIX is completely unused and is thus removed.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "04561c1fe7b067a8250e6caaf168256783580c4c", "tree": "482135e96087cb7c5c81a6a799d409a80f80fb41", "parents": [ "a928630a2ffeaf6aa9a6b78456935b6ab1be3066" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Tue Nov 14 19:53:58 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:44 2006 -0800" }, "message": "[IPv6] iflink: Convert IPv6\u0027s RTM_GETLINK to use the new netlink api\n\nBy replacing the current method of exporting the device configuration\nwhich included allocating a temporary buffer, copying ipv6_devconf\ninto it and copying that buffer into the message with a method that\nuses nla_reserve() allowing to copy the device configuration directly\ninto the skb data buffer, a GFP_ATOMIC allocation could be removed.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a928630a2ffeaf6aa9a6b78456935b6ab1be3066", "tree": "0be1f64ffb8234485cfbfb78c958f47962286fea", "parents": [ "17c157c889f4b07258af6bfec9e4e9dcf3c00178" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Nov 14 19:53:22 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:43 2006 -0800" }, "message": "[TCP]: Fix some warning when MD5 is disabled.\n\nJust some mis-placed ifdefs:\n\nnet/ipv4/tcp_minisocks.c: In function ‘tcp_twsk_destructor’:\nnet/ipv4/tcp_minisocks.c:364: warning: unused variable ‘twsk’\nnet/ipv6/tcp_ipv6.c:1846: warning: ‘tcp_sock_ipv6_specific’ defined but not used\nnet/ipv6/tcp_ipv6.c:1877: warning: ‘tcp_sock_ipv6_mapped_specific’ defined but not used\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cfb6eeb4c860592edd123fdea908d23c6ad1c7dc", "tree": "361c073622faa540ef6602ef1b0a6e8c0a17fc60", "parents": [ "bf6bce71eae386dbc37f93af7e5ad173450d9945" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Nov 14 19:07:45 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:39 2006 -0800" }, "message": "[TCP]: MD5 Signature Option (RFC2385) support.\n\nBased on implementation by Rick Payne.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b9df3cb8cf9a96e63dfdcd3056a9cbc71f2459e7", "tree": "46d19124b1bbfd9eaa26af3d6ba2293b4e8f326d", "parents": [ "1ed176a801b83915b7c8ab80e0a2a6376a2d6051" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Tue Nov 14 11:21:36 2006 -0200" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:27 2006 -0800" }, "message": "[TCP/DCCP]: Introduce net_xmit_eval\n\nThroughout the TCP/DCCP (and tunnelling) code, it often happens that the\nreturn code of a transmit function needs to be tested against NET_XMIT_CN\nwhich is a value that does not indicate a strict error condition.\n\nThis patch uses a macro for these recurring situations which is consistent\nwith the already existing macro net_xmit_errno, saving on duplicated code.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@mandriva.com\u003e\n" }, { "commit": "d3a1be9cba86c4385a5fe46673bbb4730551f454", "tree": "24bcb9244dcb894c333c33c0f1dd88e1ddcc2267", "parents": [ "f465e489c457821751f6253abaaf28c10f9d8895" ], "author": { "name": "Brian Haley", "email": "brian.haley@hp.com", "time": "Fri Nov 10 14:54:51 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:13 2006 -0800" }, "message": "[IPv6]: Only modify checksum for UDP\n\nOnly change upper-layer checksum from 0 to 0xFFFF for UDP (as RFC 768\nstates), not for others as RFC 4443 doesn\u0027t require it.\n\nSigned-off-by: Brian Haley \u003cbrian.haley@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f465e489c457821751f6253abaaf28c10f9d8895", "tree": "d36ceef24267d7b5fe4d836435a5760dc64f67be", "parents": [ "339bf98ffc6a8d8eb16fc532ac57ffbced2f8a68" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Fri Nov 10 14:11:04 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:12 2006 -0800" }, "message": "[IPv6] rules: Remove bogus tos validation check\n\nNoticed by Al Viro:\n (frh-\u003etos \u0026 ~IPV6_FLOWINFO_MASK))\nwhere IPV6_FLOWINFO_MASK is htonl(0xfffffff) and frh-\u003etos\nis u8, which makes no sense here...\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "339bf98ffc6a8d8eb16fc532ac57ffbced2f8a68", "tree": "499ad948863d2753ca10283dcf006ad28954538e", "parents": [ "a94f723d595ee085f81b1788d18e031af7eeba91" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Fri Nov 10 14:10:15 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:11 2006 -0800" }, "message": "[NETLINK]: Do precise netlink message allocations where possible\n\nAccount for the netlink message header size directly in nlmsg_new()\ninstead of relying on the caller calculate it correctly.\n\nReplaces error handling of message construction functions when\nconstructing notifications with bug traps since a failure implies\na bug in calculating the size of the skb.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a94f723d595ee085f81b1788d18e031af7eeba91", "tree": "ce9309a5ba780429bc6e10a2c075af9c9e5b769a", "parents": [ "6f4e5fff1e4d46714ea554fd83e44eab534e8b11" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Fri Nov 10 14:06:49 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:10 2006 -0800" }, "message": "[TCP]: Remove dead code in init_sequence\n\nThis removes two redundancies:\n\n1) The test (skb-\u003eprotocol \u003d\u003d htons(ETH_P_IPV6) in tcp_v6_init_sequence()\n is always true, due to\n\t* tcp_v6_conn_request() is the only function calling this one\n\t* tcp_v6_conn_request() redirects all skb\u0027s with ETH_P_IP protocol to\n\t tcp_v4_conn_request() [ cf. top of tcp_v6_conn_request()]\n\n2) The first argument, `struct sock *sk\u0027 of tcp_v{4,6}_init_sequence() is\n never used.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a11d206d0f88e092419877c7f706cafb5e1c2e57", "tree": "ed96428bb52765198d5c5b7ccbc1f1b6516ffb3f", "parents": [ "7a3025b1b3a0173be5de6ced18754b909da27b38" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Sat Nov 04 20:11:37 2006 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:08 2006 -0800" }, "message": "[IPV6]: Per-interface statistics support.\n\nFor IP MIB (RFC4293).\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "7a3025b1b3a0173be5de6ced18754b909da27b38", "tree": "dbb121ce5b9e2e97ee1e022093249eb2ed7cc3be", "parents": [ "40aa7b90a9b41a2162c829fd6cd34a09056a7ddb" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Oct 13 16:17:25 2006 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:07 2006 -0800" }, "message": "[IPV6]: Introduce ip6_dst_idev() to get inet6_dev{} stored in dst_entry{}.\n\nOtherwise, we will see a lot of casts...\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "40aa7b90a9b41a2162c829fd6cd34a09056a7ddb", "tree": "398eabbb956a12d80c46b508d18d6e528a89d119", "parents": [ "33e93c9699981024cc99fb23a0545fb19d23847d" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Thu Oct 19 13:50:09 2006 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:06 2006 -0800" }, "message": "[IPV6] ROUTE: Use \u0026rt-\u003eu.dst instead of cast.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "33e93c9699981024cc99fb23a0545fb19d23847d", "tree": "e66338ce8943ded4922abab35165d7e9db5b40a0", "parents": [ "d83ca5accb256de1b44835cd222bfdc3207bd7dc" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Sat Oct 14 02:00:56 2006 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:22:05 2006 -0800" }, "message": "[IPV6] ROUTE: Use macros to format /proc/net/ipv6_route.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "931731123a103cfb3f70ac4b7abfc71d94ba1f03", "tree": "0af6636fde05f74a8aa5421bfe9828e2a209170d", "parents": [ "ef56e622c61e74dd6077615c9ea76c5132195880" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Nov 09 19:58:25 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:52 2006 -0800" }, "message": "[TCP]: Don\u0027t set SKB owner in tcp_transmit_skb().\n\nThe data itself is already charged to the SKB, doing\nthe skb_set_owner_w() just generates a lot of noise and\nextra atomics we don\u0027t really need.\n\nLmbench improvements on lat_tcp are minimal:\n\nbefore:\nTCP latency using localhost: 23.2701 microseconds\nTCP latency using localhost: 23.1994 microseconds\nTCP latency using localhost: 23.2257 microseconds\n\nafter:\nTCP latency using localhost: 22.8380 microseconds\nTCP latency using localhost: 22.9465 microseconds\nTCP latency using localhost: 22.8462 microseconds\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9ec75fe85c58471db958386c1604e5006a2e2f69", "tree": "b8d3c899dfdb26bf657334ab0573d244fdc057a8", "parents": [ "494b4e7d819246bad67c40897b9eeaf0ce18d5ff" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Nov 09 16:26:09 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:46 2006 -0800" }, "message": "[IPV6] tcp: Fix typo _read_mostly --\u003e __read_mostly.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "72a3effaf633bcae9034b7e176bdbd78d64a71db", "tree": "b7a331527f1b15335a358f97809134f35587e57a", "parents": [ "3c62f75aac7348ee262b1295cfcfeb3473f76815" ], "author": { "name": "Eric Dumazet", "email": "dada1@cosmosbay.com", "time": "Thu Nov 16 02:30:37 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:44 2006 -0800" }, "message": "[NET]: Size listen hash tables using backlog hint\n\nWe currently allocate a fixed size (TCP_SYNQ_HSIZE\u003d512) slots hash table for\neach LISTEN socket, regardless of various parameters (listen backlog for\nexample)\n\nOn x86_64, this means order-1 allocations (might fail), even for \u0027small\u0027\nsockets, expecting few connections. On the contrary, a huge server wanting a\nbacklog of 50000 is slowed down a bit because of this fixed limit.\n\nThis patch makes the sizing of listen hash table a dynamic parameter,\ndepending of :\n- net.core.somaxconn tunable (default is 128)\n- net.ipv4.tcp_max_syn_backlog tunable (default : 256, 1024 or 128)\n- backlog value given by user application (2nd parameter of listen())\n\nFor large allocations (bigger than PAGE_SIZE), we use vmalloc() instead of\nkmalloc().\n\nWe still limit memory allocation with the two existing tunables (somaxconn \u0026\ntcp_max_syn_backlog). So for standard setups, this patch actually reduce RAM\nusage.\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1f6c9557e8206757c91b5737bb8dbd5b1ae3a773", "tree": "79673ee5d51384a73ca5604d73350f859215169e", "parents": [ "b8964ed9fa727109c9084abc807652ebfb681c18" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Thu Nov 09 15:22:48 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:41 2006 -0800" }, "message": "[NET] rules: Share common attribute validation policy\n\nMove the attribute policy for the non-specific attributes into\nnet/fib_rules.h and include it in the respective protocols.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b8964ed9fa727109c9084abc807652ebfb681c18", "tree": "03d0c7ffb21fcba9a538c445e0fb563e392491a2", "parents": [ "5f300893fdd3b6e30a226c9a848eaa39b99a6431" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Thu Nov 09 15:22:18 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:41 2006 -0800" }, "message": "[NET] rules: Protocol independant mark selector\n\nMove mark selector currently implemented per protocol into\nthe protocol independant part.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "47dcf0cb1005e86d0eea780f2984b2e7490f63cd", "tree": "1a56767a77e219fab54ab1daf34342745f6d62a8", "parents": [ "82e91ffef60e6eba9848fe149ce1eecd2b5aef12" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Thu Nov 09 15:20:38 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:39 2006 -0800" }, "message": "[NET]: Rethink mark field in struct flowi\n\nNow that all protocols have been made aware of the mark\nfield it can be moved out of the union thus simplyfing\nits usage.\n\nThe config options in the IPv4/IPv6/DECnet subsystems\nto enable respectively disable mark based routing only\nobfuscate the code with ifdefs, the cost for the\nadditional comparison in the flow key is insignificant,\nand most distributions have all these options enabled\nby default anyway. Therefore it makes sense to remove\nthe config options and enable mark based routing by\ndefault.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "82e91ffef60e6eba9848fe149ce1eecd2b5aef12", "tree": "9ccc6a518a1f678ae15cfb3a59c05127286cff96", "parents": [ "0afc46c4683df512eef34a71a85065dc555c2af2" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Thu Nov 09 15:19:14 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:38 2006 -0800" }, "message": "[NET]: Turn nfmark into generic mark\n\nnfmark is being used in various subsystems and has become\nthe defacto mark field for all kinds of packets. Therefore\nit makes sense to rename it to `mark\u0027 and remove the\ndependency on CONFIG_NETFILTER.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ae08e1f092210619fe49551aa3ed0dc0003d5880", "tree": "80e0ef51a052f811394b29bb19422feba80795bb", "parents": [ "98a4a86128d7179b22365e16bf880e849e20bc7d" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:27:11 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:26 2006 -0800" }, "message": "[IPV6]: ip6_output annotations\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fede70b9862635ab1bed84ab3d765e9069616b02", "tree": "e04ee863fee693a8ea7678bd9cdbe9b0e664d2e2", "parents": [ "90bcaf7b4a33bb9b100cc06869f0c033a870d4a0" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:25:41 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:22 2006 -0800" }, "message": "[IPV6]: annotate inet6_csk_search_req()\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "90bcaf7b4a33bb9b100cc06869f0c033a870d4a0", "tree": "fb8307b99fd9779d17fdfb0c35d836a8438d424a", "parents": [ "92d9ece7af9c84bfbd1ff640926fac5b573a09f7" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:25:17 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:21 2006 -0800" }, "message": "[IPV6]: flowlabels are net-endian\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8a74ff7770f4795d7580392890fdf06821c78769", "tree": "f0938dc881927f1340d808eefac4436ec7af5e99", "parents": [ "44473a6b279794f058955aec5c36975e74deb541" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:22:08 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:15 2006 -0800" }, "message": "[IPV6]: annotate ipv6 mcast\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "04ce69093f91547d3a7c4fc815d2868195591340", "tree": "69bea18b5d1b8c2999f13f8e0372491c9f9238e6", "parents": [ "8c689a6eae2d83970e4f34753d513e96fb97a025" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:21:01 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:12 2006 -0800" }, "message": "[IPV6]: \u0027info\u0027 argument of ipv6 -\u003eerr_handler() is net-endian\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8c689a6eae2d83970e4f34753d513e96fb97a025", "tree": "50c67089a5a46dbde93fdcb6040227fb599d5110", "parents": [ "d2ecd9ccd0694278a8c1fa179d1d058ee66e2297" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:20:21 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:11 2006 -0800" }, "message": "[XFRM]: misc annotations\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d2ecd9ccd0694278a8c1fa179d1d058ee66e2297", "tree": "c754502286939d64e53f51e6192d256d436463d0", "parents": [ "5a874db4d9bfd8a4c6324d844a4d1c7cfa5cf2c4" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:20:00 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:10 2006 -0800" }, "message": "[IPV6]: annotate inet6_hashtables\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d54a81d341af80875c201890500f727c8188dd9b", "tree": "90ea4b2fe248fd3b0e10f846329868c12f8b4123", "parents": [ "97be852f81c5bb114aab31974af2c061eb86a6de" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:00:06 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:06:31 2006 -0800" }, "message": "[IPV6] NDISC: Calculate packet length correctly for allocation.\n\nMAX_HEADER does not include the ipv6 header length in it,\nso we need to add it in explicitly.\n\nWith help from YOSHIFUJI Hideaki.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f2776ff047229c3e7cee2454e2704dd6f98fa32f", "tree": "d2dac3fa350b207863a4c1d4f848ad4f46bf5f27", "parents": [ "700f9672c9a61c12334651a94d17ec04620e1976" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Nov 21 17:41:56 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Nov 21 17:41:56 2006 -0800" }, "message": "[IPV6]: Fix address/interface handling in UDP and DCCP, according to the scoping architecture.\n\nTCP and RAW do not have this issue. Closes Bug #7432.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "53ab61c6d8f391bda04dbc1e95bac348fe81103b", "tree": "96476b54d922cba09aac0861a0e064aab1f4ae54", "parents": [ "b3fdd9f115c776d381b30b296849f8e4046bcdaa" ], "author": { "name": "Yasuyuki Kozakai", "email": "yasuyuki.kozakai@toshiba.co.jp", "time": "Mon Nov 06 10:06:23 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Nov 21 16:16:27 2006 -0800" }, "message": "[IPV6] IP6TUNNEL: Add missing nf_reset() on input path.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "b3fdd9f115c776d381b30b296849f8e4046bcdaa", "tree": "6e89df89cae17b922599033f08c26e1ec94efad3", "parents": [ "ea659e0775281e1c02556e939bf749bb4f55e50c" ], "author": { "name": "Yasuyuki Kozakai", "email": "yasuyuki.kozakai@toshiba.co.jp", "time": "Mon Nov 06 10:06:22 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Nov 21 16:16:26 2006 -0800" }, "message": "[IPV6] IP6TUNNEL: Delete all tunnel device when unloading module.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "ea659e0775281e1c02556e939bf749bb4f55e50c", "tree": "fbc6e225fce78660ee6ff3472785ce32cbe553bc", "parents": [ "557e92efd44878beccd08d5dd54ed343be0e5819" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Mon Nov 06 09:45:45 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Nov 21 16:16:25 2006 -0800" }, "message": "[IPV6] ROUTE: Do not enable router reachability probing in router mode.\n\nRFC4191 explicitly states that the procedures are applicable to\nhosts only. We should not have changed behavior of routers.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "557e92efd44878beccd08d5dd54ed343be0e5819", "tree": "e0a2d87e3140e29f6c8ad0f533efa1bc1ffb867e", "parents": [ "ea73ee23c43d6eb75f88c4fc9e1230b44673c0d2" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Mon Nov 06 09:45:45 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Nov 21 16:16:24 2006 -0800" }, "message": "[IPV6] ROUTE: Prefer reachable nexthop only if the caller requests.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "ea73ee23c43d6eb75f88c4fc9e1230b44673c0d2", "tree": "e047fcb8f2c0459b7ce2b824d45206e88d46c714", "parents": [ "b80ebbf39fc628afab7d9cf94b84cfc51d845b2f" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Mon Nov 06 09:45:44 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Nov 21 16:16:23 2006 -0800" }, "message": "[IPV6] ROUTE: Try to use router which is not known unreachable.\n\nOnly routers in \"FAILED\" state should be considered unreachable.\nOtherwise, we do not try to use speicific routes unless all least specific\nrouters are considered unreachable.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "337dde798dd1f3e4d4df4e684a0b4355dd65103d", "tree": "02bc41b44c5b20fd8fe803749f2a87be706971a7", "parents": [ "b96e7ecbd052a0916b6078e7600604d7e276a336" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Nov 14 19:49:13 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Nov 15 21:18:50 2006 -0800" }, "message": "[NETFILTER]: ip6_tables: use correct nexthdr value in ipv6_find_hdr()\n\nnexthdr is NEXTHDR_FRAGMENT, the nexthdr value from the fragment header\nis hp-\u003enexthdr.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d8a585d78efdf191a64ca655136ac1e49fd27cf4", "tree": "5effa2c2ec3a46fef6aaee1b7484d10318970d0e", "parents": [ "7fdeaf68a16f8102659cf1b30f57247d8ccbeef0" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Nov 14 19:48:09 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Nov 15 21:18:48 2006 -0800" }, "message": "[NETFILTER]: Use pskb_trim in {ip,ip6,nfnetlink}_queue\n\nBased on patch by James D. Nurmi:\n\nI\u0027ve got some code very dependant on nfnetlink_queue, and turned up a\nlarge number of warns coming from skb_trim. While it\u0027s quite possibly\nmy code, having not seen it on older kernels made me a bit suspect.\n\nAnyhow, based on some googling I turned up this thread:\nhttp://lkml.org/lkml/2006/8/13/56\n\nAnd believe the issue to be related, so attached is a small patch to\nthe kernel -- not sure if this is completely correct, but for anyone\nelse hitting the WARN_ON(1) in skbuff.h, it might be helpful..\n\nSigned-off-by: James D. Nurmi \u003cjdnurmi@gmail.com\u003e\n\nPorted to ip6_queue and nfnetlink_queue and added return value\nchecks.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "daccff024ffeb21caa2cc479ccc33b2ec50705b1", "tree": "1ed207b206c0d1a1e131f075105fc5d52f5cec48", "parents": [ "36f73d0c3b7efa72cd8b89f2d429ff39bc12f15c" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sun Nov 05 15:47:04 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Nov 05 15:47:04 2006 -0800" }, "message": "[IPV6]: Give sit driver an appropriate module alias.\n\nIt would be nice to keep things working even with this built as a\nmodule, it took me some time to realize my IPv6 tunnel was broken\nbecause of the missing sit module. This module alias fixes things\nuntil distributions have added an appropriate alias to modprobe.conf.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "36f73d0c3b7efa72cd8b89f2d429ff39bc12f15c", "tree": "d0d16b977438055ae2e6f26884b36a8604619766", "parents": [ "db38c179a759a9c4722525e8c9f09ac80e372377" ], "author": { "name": "Dmitry Mishin", "email": "dim@openvz.org", "time": "Fri Nov 03 16:08:19 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Nov 05 14:11:33 2006 -0800" }, "message": "[IPV6]: Add ndisc_netdev_notifier unregister.\n\nIf inet6_init() fails later than ndisc_init() call, or IPv6 module is\nunloaded, ndisc_netdev_notifier call remains in the list and will follows in\noops later.\n\nSigned-off-by: Dmitry Mishin \u003cdim@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5b1225454f7891970cb5ba87c8ef24edb1fa6c3a", "tree": "d663f44fe894a98b6fbed2b9de319d0327758ae9", "parents": [ "b1736a71404b3961f061c795a81210aa7f945fc0" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 01 15:28:58 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Nov 01 15:42:35 2006 -0800" }, "message": "[IPV6]: File the fingerprints off ah6-\u003espi/esp6-\u003espi\n\nIn theory these are opaque 32bit values. However, we end up\nallocating them sequentially in host-endian and stick unchanged\non the wire.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1b7c2dbc07bf0663a41e3dc838992930019f08fd", "tree": "66da0b902159e6f03c8131a21ce8ab1ea7f87097", "parents": [ "c6817e4c32d8c4118405d2dec30ac1c264349085" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Tue Oct 31 00:43:44 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 31 00:43:44 2006 -0800" }, "message": "[IPV6]: fix flowlabel seqfile handling\n\nThere\u0027s a bug in the seqfile show operation for flowlabel objects, where \neach hash chain is traversed cumulatively for each element. The following \nfunction is called for each element of each chain:\n\nstatic void ip6fl_fl_seq_show(struct seq_file *seq, struct ip6_flowlabel *fl)\n{\n while(fl) {\n seq_printf...\n\t\t\n\t\tfl \u003d fl-\u003enext;\n\t}\n}\n\nThus, objects can appear mutliple times when reading \n/proc/net/ip6_flowlabel, as the above is called for each element in the \nchain.\n\nThe solution is to remove the while() loop from the above, and traverse \neach chain exactly once, per the patch below. This also removes the \nip6fl_fl_seq_show() function, which does nothing else.\n\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c6817e4c32d8c4118405d2dec30ac1c264349085", "tree": "57c5959854118c45d6509cb782ac9bff82b0c500", "parents": [ "de76e695a5ce19c121ba7e246b45f258be678a75" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Mon Oct 30 18:56:06 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 30 18:56:06 2006 -0800" }, "message": "[IPV6]: return EINVAL for invalid address with flowlabel lease request\n\nCurrently, when an application requests a lease for a flowlabel via the \nIPV6_FLOWLABEL_MGR socket option, no error is returned if an invalid type \nof destination address is supplied as part of the request, leading to a \nsilent failure. This patch ensures that EINVAL is returned to the \napplication in this case.\n\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "590bdf7fd2292b47c428111cb1360e312eff207e", "tree": "c44b60a5e40b5e16e3478aecb839825b4a602ced", "parents": [ "844dc7c88046ecd2e52596730d7cc400d6c3ad67" ], "author": { "name": "Dmitry Mishin", "email": "dim@openvz.org", "time": "Mon Oct 30 15:12:55 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Oct 30 15:24:44 2006 -0800" }, "message": "[NETFILTER]: Missed and reordered checks in {arp,ip,ip6}_tables\n\nThere is a number of issues in parsing user-provided table in\ntranslate_table(). Malicious user with CAP_NET_ADMIN may crash system by\npassing special-crafted table to the *_tables.\n\nThe first issue is that mark_source_chains() function is called before entry\ncontent checks. In case of standard target, mark_source_chains() function\nuses t-\u003everdict field in order to determine new position. But the check, that\nthis field leads no further, than the table end, is in check_entry(), which\nis called later, than mark_source_chains().\n\nThe second issue, that there is no check that target_offset points inside\nentry. If so, *_ITERATE_MATCH macro will follow further, than the entry\nends. As a result, we\u0027ll have oops or memory disclosure.\n\nAnd the third issue, that there is no check that the target is completely\ninside entry. Results are the same, as in previous issue.\n\nSigned-off-by: Dmitry Mishin \u003cdim@openvz.org\u003e\nAcked-by: Kirill Korotaev \u003cdev@openvz.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "844dc7c88046ecd2e52596730d7cc400d6c3ad67", "tree": "b805978437e925bb3136dab0b95dc9357c9a1e96", "parents": [ "bcd620757d3a4ae78ef0ca41adb5d9e400ed92b6" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Oct 30 15:12:16 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Oct 30 15:24:43 2006 -0800" }, "message": "[NETFILTER]: remove masq/NAT from ip6tables Kconfig help\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bcd620757d3a4ae78ef0ca41adb5d9e400ed92b6", "tree": "35267772a114c8e450bf167076d5cef1c1e81e75", "parents": [ "a27b58fed90cc5654e2daf1d292cc5bc61be4dd7" ], "author": { "name": "James Morris", "email": "jmorris@namei.org", "time": "Mon Oct 30 15:08:42 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Oct 30 15:24:42 2006 -0800" }, "message": "[IPV6]: fix lockup via /proc/net/ip6_flowlabel\n\nThere\u0027s a bug in the seqfile handling for /proc/net/ip6_flowlabel, where,\nafter finding a flowlabel, the code will loop forever not finding any\nfurther flowlabels, first traversing the rest of the hash bucket then just\nlooping.\n\nThis patch fixes the problem by breaking after the hash bucket has been\ntraversed.\n\nNote that this bug can cause lockups and oopses, and is trivially invoked\nby an unpriveleged user.\n\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a27b58fed90cc5654e2daf1d292cc5bc61be4dd7", "tree": "4f01c7b0bc168b9a73cd9d5406e7fbf426ab169c", "parents": [ "28cd7752734563d5b0967b96a6bade7a1dc89c7f" ], "author": { "name": "Heiko Carstens", "email": "heiko.carstens@de.ibm.com", "time": "Mon Oct 30 15:06:12 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Oct 30 15:24:41 2006 -0800" }, "message": "[NET]: fix uaccess handling\n\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6d381634d213580d40d431e7664dfb45f641b884", "tree": "a8680dd059e9a4e115d17e54d4a8dcea4d196a3e", "parents": [ "51d8b1a65291a6956b79374b6adbbadc2263bcf6" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Oct 24 16:15:10 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 24 16:15:10 2006 -0700" }, "message": "[NETFILTER]: Fix ip6_tables extension header bypass bug\n\nAs reported by Mark Dowd \u003cMark_Dowd@McAfee.com\u003e, ip6_tables is susceptible\nto a fragmentation attack causing false negatives on extension header matches.\n\nWhen extension headers occur in the non-first fragment after the fragment\nheader (possibly with an incorrect nexthdr value in the fragment header)\na rule looking for this extension header will never match.\n\nDrop fragments that are at offset 0 and don\u0027t contain the final protocol\nheader regardless of the ruleset, since this should not happen normally.\nSince all extension headers are before the protocol header this makes sure\nan extension header is either not present or in the first fragment, where\nwe can properly parse it.\n\nWith help from Yasuyuki KOZAKAI \u003cyasuyuki.kozakai@toshiba.co.jp\u003e.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "51d8b1a65291a6956b79374b6adbbadc2263bcf6", "tree": "d6b8cbd6628c11d1c3e9c8c8e9ca048acf723a71", "parents": [ "2fab22f2d3290ff7c602fe62f22e825c48e97a06" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Oct 24 16:14:04 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 24 16:14:04 2006 -0700" }, "message": "[NETFILTER]: Fix ip6_tables protocol bypass bug\n\nAs reported by Mark Dowd \u003cMark_Dowd@McAfee.com\u003e, ip6_tables is susceptible\nto a fragmentation attack causing false negatives on protocol matches.\n\nWhen the protocol header doesn\u0027t follow the fragment header immediately,\nthe fragment header contains the protocol number of the next extension\nheader. When the extension header and the protocol header are sent in\na second fragment a rule like \"ip6tables .. -p udp -j DROP\" will never\nmatch.\n\nDrop fragments that are at offset 0 and don\u0027t contain the final protocol\nheader regardless of the ruleset, since this should not happen normally.\n\nWith help from Yasuyuki KOZAKAI \u003cyasuyuki.kozakai@toshiba.co.jp\u003e.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "375216ad0c303adeed45281ce82e153d41de679a", "tree": "6972829f65350519d8acf796d18ae8c557a764dc", "parents": [ "69c3014763966b0ae2bd190dac3654dd6cebdd45" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Sat Oct 21 20:20:54 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Oct 21 20:20:54 2006 -0700" }, "message": "[IPv6] fib: initialize tb6_lock in common place to give lockdep a key\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6723ab549df777742801716d7aeea397e6e97f2c", "tree": "17e69e8f3ec0e0d33a379491eef8e9c6ac3f1530", "parents": [ "6ba7511b7c8b71d5148f7516584d0b677acc384a" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 18 21:20:57 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 18 21:20:57 2006 -0700" }, "message": "[IPV6]: Fix route.c warnings when multiple tables are disabled.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9ce8ade015a3f82dbdf856df7a685878dd1cc0e1", "tree": "daa2d5f9b335ef9762d9aaa3b91cd07077006640", "parents": [ "3a31b9d2f2d98667832e87fa1853754ff062d6ef" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Wed Oct 18 20:46:54 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 18 20:46:54 2006 -0700" }, "message": "[IPv6] route: Fix prohibit and blackhole routing decision\n\nLookups resolving to ip6_blk_hole_entry must result in silently\ndiscarding the packets whereas an ip6_pkt_prohibit_entry is\nsupposed to cause an ICMPV6_ADM_PROHIBITED message to be sent.\n\nThanks to Kim Nordlund \u003ckim.nordlund@nokia.com\u003e for noticing\nthis bug.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "22e1e4d8dcb71762fcbe0c73d720aea8bb2013af", "tree": "41b47368c4fcc927cfd86b891470357c795c1956", "parents": [ "264e91b68aff1e39b558123498f28bf5aa68b4ee" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Mon Oct 16 22:14:26 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 18 19:55:30 2006 -0700" }, "message": "[IPV6]: Always copy rt-\u003eu.dst.error when copying a rt6_info.\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "264e91b68aff1e39b558123498f28bf5aa68b4ee", "tree": "e31791e845b23f7481733aefbd55965a30c9ed23", "parents": [ "e0eda7bbaae48ea56f1f1943ea90df72d459b9b0" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Mon Oct 16 22:12:21 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 18 19:55:29 2006 -0700" }, "message": "[IPV6]: Make IPV6_SUBTREES depend on IPV6_MULTIPLE_TABLES.\n\nAs IPV6_SUBTREES can\u0027t work without IPV6_MULTIPLE_TABLES have IPV6_SUBTREES\ndepend on it.\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e0eda7bbaae48ea56f1f1943ea90df72d459b9b0", "tree": "fc2f0c3c98a201d337a3ef9c67ff44f573b28a65", "parents": [ "4251320fa2ef93207fbefeb2eda2d265b84fc116" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Mon Oct 16 22:11:11 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 18 19:55:28 2006 -0700" }, "message": "[IPV6]: Clean up BACKTRACK().\n\nThe fn check is unnecessary as fn can never be NULL in BACKTRACK().\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4251320fa2ef93207fbefeb2eda2d265b84fc116", "tree": "7d322c9d541f24df4fedc38e964aa906226b52ad", "parents": [ "23c435f7ff884caded4a1391ba2b308d465423c0" ], "author": { "name": "Ville Nuorvala", "email": "vnuorval@tcs.hut.fi", "time": "Mon Oct 16 22:10:05 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 18 19:55:27 2006 -0700" }, "message": "[IPV6]: Make sure error handling is done when calling ip6_route_output().\n\nAs ip6_route_output() never returns NULL, error checking must be done by\nlooking at dst-\u003eerror in stead of comparing dst against NULL.\n\nSigned-off-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "39c850863d5e36e72ecf9bc3537ec717bcce97fd", "tree": "7b054ad96b58bf3f3aa31c79948e2cdfaa548a74", "parents": [ "f1a95859a86fcdfd94f8b6dc3255d70d037e1caf" ], "author": { "name": "Jan Dittmer", "email": "jdi@l4x.org", "time": "Fri Oct 13 15:05:53 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Oct 15 23:14:21 2006 -0700" }, "message": "[IPV6] sit: Add missing MODULE_LICENSE\n\nThis is missing the MODULE_LICENSE statements and taints the kernel\nupon loading. License is obvious from the beginning of the file.\n\nSigned-off-by: Jan Dittmer \u003cjdi@l4x.org\u003e\nSigned-off-by: Joerg Roedel \u003cjoro-lkml@zlug.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f1a95859a86fcdfd94f8b6dc3255d70d037e1caf", "tree": "d26eaddaf3293dadcdedbf4f366a9110f942b40b", "parents": [ "adaa70bbdfbc725e485179b06c8b23a20fbb7952" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Oct 13 15:03:34 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Oct 15 23:14:20 2006 -0700" }, "message": "[IPV6]: Remove bogus WARN_ON in Proxy-NA handling.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "adaa70bbdfbc725e485179b06c8b23a20fbb7952", "tree": "c402d42c660163902e1667fd67a00de409ac4a68", "parents": [ "918049f0135854a1583f9b3b88f44dbf2b027329" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Fri Oct 13 15:01:03 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Oct 15 23:14:19 2006 -0700" }, "message": "[IPv6] rules: Use RT6_LOOKUP_F_HAS_SADDR and fix source based selectors\n\nFixes rt6_lookup() to provide the source address in the flow\nand sets RT6_LOOKUP_F_HAS_SADDR whenever it is present in\nthe flow.\n\nAvoids unnecessary prefix comparisons by checking for a prefix\nlength first.\n\nFixes the rule logic to not match packets if a source selector\nhas been specified but no source address is available.\n\nThanks to Kim Nordlund \u003ckim.nordlund@nokia.com\u003e for working\non this patch with me.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nAcked-by: Ville Nuorvala \u003cvnuorval@tcs.hut.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9469c7b4aa210ce94c6e7208cfadbd0aca0ebe08", "tree": "3461046e3c0a63577dc26d70246bac6892fe342c", "parents": [ "496c98dff8e353880299168d36fa082d6fba5237" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Oct 10 19:41:46 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 11 23:59:58 2006 -0700" }, "message": "[NET]: Use typesafe inet_twsk() inline function instead of cast.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4244f8a9f86a6d6e820b4cb53835c15c56d41aff", "tree": "1a3278dd2797454f0e52fab75fd899a40eb16646", "parents": [ "0be669bb37693103c15e64610454f8f431a38feb" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Oct 10 19:40:50 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 11 23:59:54 2006 -0700" }, "message": "[TCP]: Use TCPOLEN_TSTAMP_ALIGNED macro instead of magic number.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0be669bb37693103c15e64610454f8f431a38feb", "tree": "d00e9e00a22c601bf193d6d26d227b4e4c8100b0", "parents": [ "989e5b96e1af399296e2d1a34ca4a5aea1cf6d63" ], "author": { "name": "Joerg Roedel", "email": "joro-lkml@zlug.org", "time": "Tue Oct 10 14:49:53 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 11 23:59:52 2006 -0700" }, "message": "[IPV6]: Seperate sit driver to extra module (addrconf.c changes)\n\nThis patch contains the changes to net/ipv6/addrconf.c to remove sit\nspecific code if the sit driver is not selected.\n\nSigned-off-by: Joerg Roedel \u003cjoro-lkml@zlug.org\u003e\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "989e5b96e1af399296e2d1a34ca4a5aea1cf6d63", "tree": "0b3f25d25b43806c34d4cf91c22f530a0c9c5cf3", "parents": [ "effee6a00034a8d83a6dea6d221820d87364ac21" ], "author": { "name": "Joerg Roedel", "email": "joro-lkml@zlug.org", "time": "Tue Oct 10 14:47:44 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 11 23:59:50 2006 -0700" }, "message": "[IPV6]: Seperate sit driver to extra module\n\nThis patch removes the driver of the IPv6-in-IPv4 tunnel driver (sit)\nfrom the IPv6 module. It adds an option to Kconfig which makes it\npossible to compile it as a seperate module.\n\nSigned-off-by: Joerg Roedel \u003cjoro-lkml@zlug.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5b368e61c2bcb2666bb66e2acf1d6d85ba6f474d", "tree": "293f595f737540a546ba186ba1f054389aa95f6f", "parents": [ "134b0fc544ba062498451611cb6f3e4454221b3d" ], "author": { "name": "Venkat Yekkirala", "email": "vyekkirala@trustedcs.com", "time": "Thu Oct 05 15:42:18 2006 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 11 23:59:37 2006 -0700" }, "message": "IPsec: correct semantics for SELinux policy matching\n\nCurrently when an IPSec policy rule doesn\u0027t specify a security\ncontext, it is assumed to be \"unlabeled\" by SELinux, and so\nthe IPSec policy rule fails to match to a flow that it would\notherwise match to, unless one has explicitly added an SELinux\npolicy rule allowing the flow to \"polmatch\" to the \"unlabeled\"\nIPSec policy rules. In the absence of such an explicitly added\nSELinux policy rule, the IPSec policy rule fails to match and\nso the packet(s) flow in clear text without the otherwise applicable\nxfrm(s) applied.\n\nThe above SELinux behavior violates the SELinux security notion of\n\"deny by default\" which should actually translate to \"encrypt by\ndefault\" in the above case.\n\nThis was first reported by Evgeniy Polyakov and the way James Morris\nwas seeing the problem was when connecting via IPsec to a\nconfined service on an SELinux box (vsftpd), which did not have the\nappropriate SELinux policy permissions to send packets via IPsec.\n\nWith this patch applied, SELinux \"polmatching\" of flows Vs. IPSec\npolicy rules will only come into play when there\u0027s a explicit context\nspecified for the IPSec policy rule (which also means there\u0027s corresponding\nSELinux policy allowing appropriate domains/flows to polmatch to this context).\n\nSecondly, when a security module is loaded (in this case, SELinux), the\nsecurity_xfrm_policy_lookup() hook can return errors other than access denied,\nsuch as -EINVAL. We were not handling that correctly, and in fact\ninverting the return logic and propagating a false \"ok\" back up to\nxfrm_lookup(), which then allowed packets to pass as if they were not\nassociated with an xfrm policy.\n\nThe solution for this is to first ensure that errno values are\ncorrectly propagated all the way back up through the various call chains\nfrom security_xfrm_policy_lookup(), and handled correctly.\n\nThen, flow_cache_lookup() is modified, so that if the policy resolver\nfails (typically a permission denied via the security module), the flow\ncache entry is killed rather than having a null policy assigned (which\nindicates that the packet can pass freely). This also forces any future\nlookups for the same flow to consult the security module (e.g. SELinux)\nfor current security policy (rather than, say, caching the error on the\nflow cache entry).\n\nThis patch: Fix the selinux side of things.\n\nThis makes sure SELinux polmatching of flow contexts to IPSec policy\nrules comes into play only when an explicit context is associated\nwith the IPSec policy rule.\n\nAlso, this no longer defaults the context of a socket policy to\nthe context of the socket since the \"no explicit context\" case\nis now handled properly.\n\nSigned-off-by: Venkat Yekkirala \u003cvyekkirala@TrustedCS.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n" }, { "commit": "fefd26b3b8597a11a422d950c0d4424ff33a70ad", "tree": "6794a36072635e71e5b33aec47c616bafdca65c1", "parents": [ "4a61f17378c2cdd9bd8f34ef8bd7422861d0c1f1", "038b0a6d8d32db934bba6a24e74e76e4e327a94f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Wed Oct 04 09:59:57 2006 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@g5.osdl.org", "time": "Wed Oct 04 09:59:57 2006 -0700" }, "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/davej/configh\n\n* master.kernel.org:/pub/scm/linux/kernel/git/davej/configh:\n Remove all inclusions of \u003clinux/config.h\u003e\n\nManually resolved trivial path conflicts due to removed files in\nthe sound/oss/ subdirectory.\n" }, { "commit": "038b0a6d8d32db934bba6a24e74e76e4e327a94f", "tree": "5fbeb3e8f140e20f8ce0e33e12b32ec5b0724cd6", "parents": [ "78b656b8bf933101b42409b4492734b23427bfc3" ], "author": { "name": "Dave Jones", "email": "davej@redhat.com", "time": "Wed Oct 04 03:38:54 2006 -0400" }, "committer": { "name": "Dave Jones", "email": "davej@redhat.com", "time": "Wed Oct 04 03:38:54 2006 -0400" }, "message": "Remove all inclusions of \u003clinux/config.h\u003e\nkbuild explicitly includes this at build time.\n\nSigned-off-by: Dave Jones \u003cdavej@redhat.com\u003e\n" }, { "commit": "0a69452cb45add0841c2bc1e75c25f6bd4f1d8d9", "tree": "17906377f0f55c809126932e3a0e4b9bb972739c", "parents": [ "80246ab36ec8baf7d107254adb166baa555a59f8" ], "author": { "name": "Diego Beltrami", "email": "diego.beltrami@gmail.com", "time": "Tue Oct 03 23:47:05 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 04 00:31:09 2006 -0700" }, "message": "[XFRM]: BEET mode\n\nThis patch introduces the BEET mode (Bound End-to-End Tunnel) with as\nspecified by the ietf draft at the following link:\n\nhttp://www.ietf.org/internet-drafts/draft-nikander-esp-beet-mode-06.txt\n\nThe patch provides only single family support (i.e. inner family \u003d\nouter family).\n\nSigned-off-by: Diego Beltrami \u003cdiego.beltrami@gmail.com\u003e\nSigned-off-by: Miika Komu \u003cmiika@iki.fi\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Abhinav Pathak \u003cabhinav.pathak@hiit.fi\u003e\nSigned-off-by: Jeff Ahrenholz \u003cahrenholz@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1e0c14f49d6b393179f423abbac47f85618d3d46", "tree": "9d789c9e4988f96a2da35506f12aeeb5b945432d", "parents": [ "132a55f3c5c0b1a364d32f65595ad8838c30a60e" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Oct 03 14:35:49 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 04 00:31:00 2006 -0700" }, "message": "[UDP]: Fix MSG_PROBE crash\n\nUDP tracks corking status through the pending variable. The\nIP layer also tracks it through the socket write queue. It\nis possible for the two to get out of sync when MSG_PROBE is\nused.\n\nThis patch changes UDP to check the write queue to ensure\nthat the two stay in sync.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "132a55f3c5c0b1a364d32f65595ad8838c30a60e" }