)]}' { "log": [ { "commit": "84f59370c519449c70dcc813b050f5cbbf0098e7", "tree": "247917a098519394b08c52334d6eacc949f10848", "parents": [ "eb867579311a9c1e998d6911af056772c400122a" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Thu Apr 03 13:33:00 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 03 13:33:00 2008 -0700" }, "message": "[IPV6]: Fix refcounting for anycast dst entries.\n\nAnycast DST entries allocated inside ipv6_dev_ac_inc are leaked when\nnetwork device is stopped without removing IPv6 addresses from it. The\nbug has been observed in the reality on 2.6.18-rhel5 kernel.\n\nIn the above case addrconf_ifdown marks all entries as obsolete and\nip6_del_rt called from __ipv6_dev_ac_dec returns ENOENT. The\nreferrence is not dropped.\n\nThe fix is simple. DST entry should not keep referrence when stored in\nthe FIB6 tree.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "eb867579311a9c1e998d6911af056772c400122a", "tree": "8f0ba1a08b34472dc8bbf1355de54e92414c5ebd", "parents": [ "439e23857a21c3a953826eed23c818697a97de1a" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Thu Apr 03 13:31:53 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 03 13:31:53 2008 -0700" }, "message": "[IPV6]: inet6_dev on loopback should be kept until namespace stop.\n\nIn the other case it will be destroyed when last address will be removed\nfrom lo inside a namespace. This will break IPv6 in several places. The\nmost obvious one is ip6_dst_ifdown.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "439e23857a21c3a953826eed23c818697a97de1a", "tree": "72d751492b9bafb55da3c6a35cea9e17573f938b", "parents": [ "af2681828af5f2b42e12e8b16ba0cf113cf486c8" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Thu Apr 03 13:30:17 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 03 13:30:17 2008 -0700" }, "message": "[IPV6]: Event type in addrconf_ifdown is mis-used.\n\naddrconf_ifdown is broken in respect to the usage of how\nparameter. This function is called with (event !\u003d NETDEV_DOWN) and (2)\non the IPv6 stop. It the latter case inet6_dev from loopback device\nshould be destroyed.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "af2681828af5f2b42e12e8b16ba0cf113cf486c8", "tree": "ed25908930ea98782ec7a13fd985c9825317a8b2", "parents": [ "9597362d354f8655ece324b01d0c640a0e99c077" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Apr 03 12:52:19 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 03 12:52:19 2008 -0700" }, "message": "[ICMP]: Ensure that ICMP relookup maintains status quo\n\nThe ICMP relookup path is only meant to modify behaviour when\nappropriate IPsec policies are in place and marked as requiring\nrelookups. It is certainly not meant to modify behaviour when\nIPsec policies don\u0027t exist at all.\n\nHowever, due to an oversight on the error paths existing behaviour\nmay in fact change should one of the relookup steps fail.\n\nThis patch corrects this by redirecting all errors on relookup\nfailures to the previous code path. That is, if the initial\nxfrm_lookup let the packet pass, we will stand by that decision\nshould the relookup fail due to an error.\n\nThis should be safe from a security point-of-view because compliant\nsystems must install a default deny policy so the packet would\u0027nt\nhave passed in that case.\n\nMany thanks to Julian Anastasov for pointing out this error.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f32c5f2c3866bf4d932d2bc42216dafb90a50ab7", "tree": "fd2d7da5651b76027977dc35af353a45ca348a45", "parents": [ "a22eb6faae4ec64d59cc206671eb0bfe46c5ffd2" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Apr 02 00:06:09 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 02 00:06:09 2008 -0700" }, "message": "[IPV6]: Fix ICMP relookup error path dst leak\n\nWhen we encounter an error while looking up the dst the second\ntime we need to drop the first dst. This patch is pretty much\nthe same as the one for IPv4.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "eac55bf97094f6b64116426864cf4666ef7587bc", "tree": "467776de93a7fdbb75904dbd702f7c417e18aa69", "parents": [ "c6fbfac2e61c9a8617f64b93e8c990b8d864bce5" ], "author": { "name": "Benoit Boissinot", "email": "benoit.boissinot@ens-lyon.org", "time": "Wed Apr 02 00:01:35 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 02 00:01:35 2008 -0700" }, "message": "IPv6: do not create temporary adresses with too short preferred lifetime\n\nFrom RFC341:\nA temporary address is created only if this calculated Preferred\nLifetime is greater than REGEN_ADVANCE time units. In particular, an\nimplementation must not create a temporary address with a zero\nPreferred Lifetime.\n\nSigned-off-by: Benoit Boissinot \u003cbenoit.boissinot@ens-lyon.org\u003e\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c6fbfac2e61c9a8617f64b93e8c990b8d864bce5", "tree": "54fd0c1543069a617e3b315346e3593e0b3be52c", "parents": [ "1905f6c736cb618e07eca0c96e60e3c024023428" ], "author": { "name": "Benoit Boissinot", "email": "benoit.boissinot@ens-lyon.org", "time": "Wed Apr 02 00:00:58 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 02 00:00:58 2008 -0700" }, "message": "IPv6: only update the lifetime of the relevant temporary address\n\nWhen receiving a prefix information from a routeur, only update the\nlifetimes of the temporary address associated with that prefix.\n\nOtherwise if one deprecated prefix is advertized, all your temporary\naddresses will become deprecated.\n\nSigned-off-by: Benoit Boissinot \u003cbenoit.boissinot@ens-lyon.org\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4c7966b86b910d6d4869aba1d7417d053ac9682c", "tree": "ec65994e682b6c3e05533ddd1bb15986687f8ea1", "parents": [ "9f09243890a4e7d2e06d40b56f26a64f88c6ec8b" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Mon Mar 31 19:30:45 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 31 19:30:45 2008 -0700" }, "message": "[IPV6] MCAST: Ensure to check multicast listener(s).\n\nIn ip6_mc_input(), we need to check whether we have listener(s) for\nthe packet.\n\nAfter commit ae7bf20a6316272acfcaef5d265b18aaa54b41e4, all packets\nfor multicast destinations are delivered to upper layer if\nIFF_PROMISC or IFF_ALLMULTI is set.\n\nIn fact, bug was rather ancient; the original (before the commit)\nintent of the dev-\u003eflags check was to skip the ipv6_chk_mcast_addr()\ncall, assuming L2 filters packets appropriately, but it was even not\ntrue.\n\nLet\u0027s explicitly check our multicast list.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nAcked-by: David L Stevens \u003cdlstevens@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e8e16b706e8406f1ab3bccab16932ebc513896d8", "tree": "75b52bb42601756995a1ffba206608f3f97b6df5", "parents": [ "0ef4730927c54cac5006759fa0cf50fbeff9d191" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 28 17:30:18 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 28 17:30:18 2008 -0700" }, "message": "[INET]: inet_frag_evictor() must run with BH disabled\n\nBased upon a lockdep trace from Dave Jones.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8eeee8b152ae6bbe181518efaf62ba8e9c613693", "tree": "b5900762ddf2a5d03ed31da629b726c6fd6a710f", "parents": [ "920fc941a9617f95ccb283037fe6f8a38d95bb69" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Thu Mar 27 16:55:53 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 27 16:55:53 2008 -0700" }, "message": "[NETFILTER]: Replate direct proc_fops assignment with proc_create call.\n\nThis elliminates infamous race during module loading when one could lookup\nproc entry without proc_fops assigned.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "920fc941a9617f95ccb283037fe6f8a38d95bb69", "tree": "1de9a439eec25d514f25254320ded076f5fd8144", "parents": [ "732c8bd590625e8bc0b88313b82930e336b2bec4" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Thu Mar 27 16:08:03 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 27 16:08:03 2008 -0700" }, "message": "[ESP]: Ensure IV is in linear part of the skb to avoid BUG() due to OOB access\n\nESP does not account for the IV size when calling pskb_may_pull() to\nensure everything it accesses directly is within the linear part of a\npotential fragment. This results in a BUG() being triggered when the\nboth the IPv4 and IPv6 ESP stack is fed with an skb where the first\nfragment ends between the end of the esp header and the end of the IV.\n\nThis bug was found by Dirk Nehring \u003cdnehring@gmx.net\u003e .\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "732c8bd590625e8bc0b88313b82930e336b2bec4", "tree": "1cf3f6b9db7b886d35bbf38bab2ca6ff82d206d8", "parents": [ "0e5606e4f46b7cf52dd445af01e71ed9dbb7f735" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Mar 26 16:51:09 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 26 16:51:09 2008 -0700" }, "message": "[IPSEC]: Fix BEET output\n\nThe IPv6 BEET output function is incorrectly including the inner\nheader in the payload to be protected. This causes a crash as\nthe packet doesn\u0027t actually have that many bytes for a second\nheader.\n\nThe IPv4 BEET output on the other hand is broken when it comes\nto handling an inner IPv6 header since it always assumes an\ninner IPv4 header.\n\nThis patch fixes both by making sure that neither BEET output\nfunction touches the inner header at all. All access is now\ndone through the protocol-independent cb structure. Two new\nattributes are added to make this work, the IP header length\nand the IPv4 option length. They\u0027re filled in by the inner\nmode\u0027s output function.\n\nThanks to Joakim Koskela for finding this problem.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "df9dcb4588aca9cc243cf1f3f454361a84e1cbdb", "tree": "53dabed7cffee752109808cbea2f812e0a6d7faf", "parents": [ "fa86d322d89995fef1bfb5cc768b89d8c22ea0d9" ], "author": { "name": "Kazunori MIYAZAWA", "email": "kazunori@miyazawa.org", "time": "Mon Mar 24 14:51:51 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 24 14:51:51 2008 -0700" }, "message": "[IPSEC]: Fix inter address family IPsec tunnel handling.\n\nSigned-off-by: Kazunori MIYAZAWA \u003ckazunori@miyazawa.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fa86d322d89995fef1bfb5cc768b89d8c22ea0d9", "tree": "e657b8adc9ccd2e13b2e2276fab4733a273ded09", "parents": [ "8f3ea33a5078a09eba12bfe57424507809367756" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Mon Mar 24 14:48:59 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 24 14:48:59 2008 -0700" }, "message": "[NEIGH]: Fix race between pneigh deletion and ipv6\u0027s ndisc_recv_ns (v3).\n\nProxy neighbors do not have any reference counting, so any caller\nof pneigh_lookup (unless it\u0027s a netlink triggered add/del routine)\nshould _not_ perform any actions on the found proxy entry. \n\nThere\u0027s one exception from this rule - the ipv6\u0027s ndisc_recv_ns() \nuses found entry to check the flags for NTF_ROUTER.\n\nThis creates a race between the ndisc and pneigh_delete - after \nthe pneigh is returned to the caller, the nd_tbl.lock is dropped \nand the deleting procedure may proceed.\n\nOne of the fixes would be to add a reference counting, but this\nproblem exists for ndisc only. Besides such a patch would be too \nbig for -rc4.\n\nSo I propose to introduce a __pneigh_lookup() which is supposed\nto be called with the lock held and use it in ndisc code to check\nthe flags on alive pneigh entry.\n\n\nChanges from v2:\nAs David noticed, Exported the __pneigh_lookup() to ipv6 module. \nThe checkpatch generates a warning on it, since the EXPORT_SYMBOL \ndoes not follow the symbol itself, but in this file all the \nexports come at the end, so I decided no to break this harmony.\n\nChanges from v1:\nFixed comments from YOSHIFUJI - indentation of prototype in header\nand the pndisc_check_router() name - and a compilation fix, pointed\nby Daniel - the is_routed was (falsely) considered as uninitialized\nby gcc.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "421f099bc555c5f1516fdf5060de1d6bb5f51002", "tree": "e6175f1bd48428f9159eb91a81ba1cbb0418026d", "parents": [ "6440cc9e0f48ade57af7be28008cbfa6a991f287" ], "author": { "name": "Julia Lawall", "email": "julia@diku.dk", "time": "Sat Mar 22 18:04:16 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Mar 22 18:04:16 2008 -0700" }, "message": "[IPV6] net/ipv6/ndisc.c: remove unused variable\n\nThe variable hlen is initialized but never used otherwise.\n\nThe semantic patch that makes this change is as follows:\n(http://www.emn.fr/x-info/coccinelle/)\n\n// \u003csmpl\u003e\n@@\ntype T;\nidentifier i;\nconstant C;\n@@\n\n(\nextern T i;\n|\n- T i;\n \u003c+... when !\u003d i\n- i \u003d C;\n ...+\u003e\n)\n// \u003c/smpl\u003e\n\nSigned-off-by: Julia Lawall \u003cjulia@diku.dk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "38fe999e2286139cccdaa500a81bd49a16a81158", "tree": "317cb01faf3c2fd08a908e694a61df27006f3fea", "parents": [ "607bfbf2d55dd1cfe5368b41c2a81a8c9ccf4723" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Thu Mar 20 16:13:58 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 20 16:13:58 2008 -0700" }, "message": "[IPV6] KCONFIG: Fix description about IPV6_TUNNEL.\n\nBased on notice from \"Colin\" \u003ccolins@sjtu.edu.cn\u003e.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ed58dd41f3aeefc11a7f634db90687f92ea8632e", "tree": "4d73cb9b13fb8742cd9da21b7e98420efaa4e70a", "parents": [ "7adc3830f90df04a13366914d80a3ed407db5381" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Mar 04 14:29:21 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 04 14:29:21 2008 -0800" }, "message": "[ESP]: Add select on AUTHENC\n\nNow the ESP uses the AEAD interface even for algorithms which are\nnot combined mode, we need to select CONFIG_CRYPTO_AUTHENC as\notherwise only combined mode algorithms will work.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4436f4cbfac15acea139863e322ed2f9efb118d3", "tree": "89be855725f3120513bb0ed74a9608a1ab3b5ed1", "parents": [ "160f17e345f5b50484d6cdc985b8686a05bf015d" ], "author": { "name": "Wang Chen", "email": "wangchen@cn.fujitsu.com", "time": "Thu Feb 28 14:13:46 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 28 14:13:46 2008 -0800" }, "message": "[IPV6]: Use proc_create() to setup -\u003eproc_fops first\n\nUse proc_create() to make sure that -\u003eproc_fops be setup before gluing\nPDE to main tree.\n\nSigned-off-by: Wang Chen \u003cwangchen@cn.fujitsu.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "21e43188f272c7fd9efc84b8244c0b1dfccaa105", "tree": "ad0313f88c3abe948e5a5ec61fd404a5cbfd2972", "parents": [ "60717f7e761ca04925d17e90e556e689ab134cdc" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Feb 28 11:23:17 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 28 11:23:17 2008 -0800" }, "message": "[IPCOMP]: Disable BH on output when using shared tfm\n\nBecause we use shared tfm objects in order to conserve memory,\n(each tfm requires 128K of vmalloc memory), BH needs to be turned\noff on output as that can occur in process context.\n\nPreviously this was done implicitly by the xfrm output code.\nThat was lost when it became lockless. So we need to add the\nBH disabling to IPComp directly.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3bdfe7ec08b4256121a8894cd978e74fcf7031d7", "tree": "734669177b809129106d819a9ad86fe21c6d72b4", "parents": [ "b37d428b24ad38034f56b614de05686ba151b614" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Wed Feb 27 12:06:38 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Feb 27 12:06:38 2008 -0800" }, "message": "[IPV6] SYSCTL: Fix possible memory leakage in error path.\n\nIn error path, we do need to free memory just allocated.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b37d428b24ad38034f56b614de05686ba151b614", "tree": "dfa41745c88edb80a47c246d13a899ee06a7510f", "parents": [ "d9595a7b9c777d45a74774f1428c263a0a47f4c0" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Feb 26 23:51:04 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 26 23:51:04 2008 -0800" }, "message": "[INET]: Don\u0027t create tunnels with \u0027%\u0027 in name.\n\nFour tunnel drivers (ip_gre, ipip, ip6_tunnel and sit) can receive a\npre-defined name for a device from the userspace. Since these drivers\ncall the register_netdevice() (rtnl_lock, is held), which does _not_\ngenerate the device\u0027s name, this name may contain a \u0027%\u0027 character.\n\nNot sure how bad is this to have a device with a \u0027%\u0027 in its name, but\nall the other places either use the register_netdev(), which call the\ndev_alloc_name(), or explicitly call the dev_alloc_name() before\nregistering, i.e. do not allow for such names.\n\nThis had to be prior to the commit 34cc7b, but I forgot to number the\npatches and this one got lost, sorry.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f1243c2db6e3b8e5a602b1be2d256b582fc78ce4", "tree": "7764c3e6492a6ef84d58f6ef272098b88c724122", "parents": [ "3dbf8d56a2b7e0d738950daa16682e1e6dafb28b" ], "author": { "name": "Benjamin Thery", "email": "benjamin.thery@bull.net", "time": "Tue Feb 26 18:10:03 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 26 18:42:37 2008 -0800" }, "message": "[IPV6]: Add missing initializations of the new nl_info.nl_net field\n\nAdd some more missing initializations of the new nl_info.nl_net field\nin IPv6 stack. This field will be used when network namespaces are\nfully supported.\n\nSigned-off-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "34cc7ba6398203aab4056917fa1e2aa5988487aa", "tree": "40fc152c1d9722ca70154bd6d989694fff526280", "parents": [ "55b01e8681cba392ccda4ff6184054d38968115d" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Sat Feb 23 20:19:20 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Feb 23 20:19:20 2008 -0800" }, "message": "[IP_TUNNEL]: Don\u0027t limit the number of tunnels with generic name explicitly.\n\nUse the added dev_alloc_name() call to create tunnel device name,\nrather than iterate in a hand-made loop with an artificial limit.\n\nThanks Patrick for noticing this.\n\n[ The way this works is, when the device is actually registered,\n the generic code noticed the \u0027%\u0027 in the name and invokes\n dev_alloc_name() to fully resolve the name. -DaveM ]\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e2b58a67b91dec07dfb40ca2056c64011ce8489d", "tree": "46e258092c2401b9cf6bc232ecfe96248a51982e", "parents": [ "94cb1503c799c0197e7ef5bad606fee5c84b99d8" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Feb 19 17:17:52 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 19 17:17:52 2008 -0800" }, "message": "[NETFILTER]: {ip,ip6,nfnetlink}_queue: fix SKB_LINEAR_ASSERT when mangling packet data\n\nAs reported by Tomas Simonaitis \u003ctomas.simonaitis@gmail.com\u003e,\ninserting new data in skbs queued over {ip,ip6,nfnetlink}_queue\ntriggers a SKB_LINEAR_ASSERT in skb_put().\n\nGoing back through the git history, it seems this bug is present since\nat least 2.6.12-rc2, probably even since the removal of\nskb_linearize() for netfilter.\n\nLinearize non-linear skbs through skb_copy_expand() when enlarging\nthem. Tested by Thomas, fixes bugzilla #9933.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2df96af03d97e98cbea9f9cb71fc56ea5fc544b2", "tree": "58b1bb60fc0c6c4efe1b8479782652feefc149c2", "parents": [ "9937ded8e44de8865cba1509d24eea9d350cebf0" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Mon Feb 18 20:50:42 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 20:50:42 2008 -0800" }, "message": "[IPV6]: Use BUG_ON instead of if + BUG in fib6_del_route.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9937ded8e44de8865cba1509d24eea9d350cebf0", "tree": "76cdeafd3acd6f06005b48abbdd7f2c9771f9a92", "parents": [ "8ac62dc773c149d7b7124b4912b425842f905d3e" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Mon Feb 18 20:49:36 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 20:49:36 2008 -0800" }, "message": "[IPV6]: dst_entry leak in ip4ip6_err. (resend)\n\nThe result of the ip_route_output is not assigned to skb. This means that\n- it is leaked\n- possible OOPS below dereferrencing skb-\u003edst\n- no ICMP message for this case\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5ee46e562c9c10a5e25920c4406a42061cf27839", "tree": "5fc49b932c6732e3e98a7abfcd02bc1f09c84dd9", "parents": [ "05705e4e1158ad2c1a22817f27d91ff0758fd0a9" ], "author": { "name": "Wang Chen", "email": "wangchen@cn.fujitsu.com", "time": "Sun Feb 17 22:34:53 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Feb 17 22:34:53 2008 -0800" }, "message": "[IPV6]: Fix hardcoded removing of old module code\n\nRusty hardcoded the old module code.\nWe can remove it now.\n\nSigned-off-by: Wang Chen \u003cwangchen@cn.fujitsu.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b5c15fc004ac83b7ad280acbe0fd4bbed7e2c8d4", "tree": "833b7ee268aa10aabd4b1baffb83c75f7402bc77", "parents": [ "073a371987f9a9806a85329eed51dca1fc52a7a0" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Feb 14 23:49:37 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 14 23:49:37 2008 -0800" }, "message": "[IPV6]: Fix reversed local_df test in ip6_fragment\n\nI managed to reverse the local_df test when forward-porting this\npatch so it actually makes things worse by never fragmenting at\nall.\n\nThanks to David Stevens for testing and reporting this bug.\n\nBill Fink pointed out that the local_df setting is also the wrong\nway around.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b318e0e4ef4e85812c25afa19f75addccc834cd4", "tree": "95d51df1aa01978a99e763cd92fd6f7f4647bf20", "parents": [ "45b503548210fe6f23e92b856421c2a3f05fd034" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Feb 12 22:50:35 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 12 22:50:35 2008 -0800" }, "message": "[IPSEC]: Fix bogus usage of u64 on input sequence number\n\nAl Viro spotted a bogus use of u64 on the input sequence number which\nis big-endian. This patch fixes it by giving the input sequence number\nits own member in the xfrm_skb_cb structure.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "28a89453b1e8de8d777ad96fa1eef27b5d1ce074", "tree": "3dd9cc9d9c402f1191df99937897e150f3d4e724", "parents": [ "69cc64d8d92bf852f933e90c888dfff083bd4fc9" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Feb 12 18:07:27 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 12 18:07:27 2008 -0800" }, "message": "[IPV6]: Fix IPsec datagram fragmentation\n\nThis is a long-standing bug in the IPsec IPv6 code that breaks\nwhen we emit a IPsec tunnel-mode datagram packet. The problem\nis that the code the emits the packet assumes the IPv6 stack\nwill fragment it later, but the IPv6 stack assumes that whoever\nis emitting the packet is going to pre-fragment the packet.\n\nIn the long term we need to fix both sides, e.g., to get the\ndatagram code to pre-fragment as well as to get the IPv6 stack\nto fragment locally generated tunnel-mode packet.\n\nFor now this patch does the second part which should make it\nwork for the IPsec host case.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "238fc7eac8e74681da7a6cb6748afb5422afc1be", "tree": "70ab66cdd19bed749dee02aa0e2812b8a1142452", "parents": [ "da219b7c69bd5219fe63b1f2fc2c96eb7a21d2c6" ], "author": { "name": "Rami Rosen", "email": "ramirose@gmail.com", "time": "Sat Feb 09 23:43:11 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Feb 09 23:43:11 2008 -0800" }, "message": "[IPV6]: Replace using the magic constant \"1024\" with IP6_RT_PRIO_USER for fc_metric.\n\nThis patch replaces the explicit usage of the magic constant \"1024\"\nwith IP6_RT_PRIO_USER in the IPV6 tree.\n\nSigned-off-by: Rami Rosen \u003cramirose@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8cf229437fd826c32a44546899412b1eb3e1db6f", "tree": "3afef8d1a3839b1ede06c738a0847f06bb3da3dd", "parents": [ "5d8c0aa9433b09387d9021358baef7939f9b32c4" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Feb 05 03:15:50 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 05 03:15:50 2008 -0800" }, "message": "[ICMP]: Restore pskb_pull calls in receive function\n\nSomewhere along the development of my ICMP relookup patch the header\nlength check went AWOL on the non-IPsec path. This patch restores the\ncheck.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5d8c0aa9433b09387d9021358baef7939f9b32c4", "tree": "839a532abef00a33e3b2357340ad52cec92bce5f", "parents": [ "2bfc79de2b6482955f0e352da7e53787dd8167c0" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Feb 05 03:14:44 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 05 03:14:44 2008 -0800" }, "message": "[INET]: Fix accidentally broken inet(6)_hash_connect\u0027s port offset calculations.\n\nThe port offset calculations depend on the protocol family, but, as\nAdrian noticed, I broke this logic with the commit\n\n\t5ee31fc1ecdcbc234c8c56dcacef87c8e09909d8\n\t[INET]: Consolidate inet(6)_hash_connect.\n\nReturn this logic back, by passing the port offset directly into the\nconsolidated function.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nNoticed-by: Adrian Bunk \u003cbunk@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ab1e0a13d70299e792fd0527cefd070c1405fa5b", "tree": "d470e7b94b0e33ea59b12713366f1bee0b94f78c", "parents": [ "9dc7f30e3bac329998a2a9bb814bd0abc7cb58e2" ], "author": { "name": "Arnaldo Carvalho de Melo", "email": "acme@redhat.com", "time": "Sun Feb 03 04:06:04 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Feb 03 04:28:52 2008 -0800" }, "message": "[SOCK] proto: Add hashinfo member to struct proto\n\nThis way we can remove TCP and DCCP specific versions of\n\nsk-\u003esk_prot-\u003eget_port: both v4 and v6 use inet_csk_get_port\nsk-\u003esk_prot-\u003ehash: inet_hash is directly used, only v6 need\n a specific version to deal with mapped sockets\nsk-\u003esk_prot-\u003eunhash: both v4 and v6 use inet_hash directly\n\nstruct inet_connection_sock_af_ops also gets a new member, bind_conflict, so\nthat inet_csk_get_port can find the per family routine.\n\nNow only the lookup routines receive as a parameter a struct inet_hashtable.\n\nWith this we further reuse code, reducing the difference among INET transport\nprotocols.\n\nEventually work has to be done on UDP and SCTP to make them share this\ninfrastructure and get as a bonus inet_diag interfaces so that iproute can be\nused with these protocols.\n\nnet-2.6/net/ipv4/inet_hashtables.c:\n struct proto\t\t\t | +8\n struct inet_connection_sock_af_ops | +8\n 2 structs changed\n __inet_hash_nolisten | +18\n __inet_hash | -210\n inet_put_port | +8\n inet_bind_bucket_create | +1\n __inet_hash_connect | -8\n 5 functions changed, 27 bytes added, 218 bytes removed, diff: -191\n\nnet-2.6/net/core/sock.c:\n proto_seq_show | +3\n 1 function changed, 3 bytes added, diff: +3\n\nnet-2.6/net/ipv4/inet_connection_sock.c:\n inet_csk_get_port | +15\n 1 function changed, 15 bytes added, diff: +15\n\nnet-2.6/net/ipv4/tcp.c:\n tcp_set_state | -7\n 1 function changed, 7 bytes removed, diff: -7\n\nnet-2.6/net/ipv4/tcp_ipv4.c:\n tcp_v4_get_port | -31\n tcp_v4_hash | -48\n tcp_v4_destroy_sock | -7\n tcp_v4_syn_recv_sock | -2\n tcp_unhash | -179\n 5 functions changed, 267 bytes removed, diff: -267\n\nnet-2.6/net/ipv6/inet6_hashtables.c:\n __inet6_hash | +8\n 1 function changed, 8 bytes added, diff: +8\n\nnet-2.6/net/ipv4/inet_hashtables.c:\n inet_unhash | +190\n inet_hash | +242\n 2 functions changed, 432 bytes added, diff: +432\n\nvmlinux:\n 16 functions changed, 485 bytes added, 492 bytes removed, diff: -7\n\n/home/acme/git/net-2.6/net/ipv6/tcp_ipv6.c:\n tcp_v6_get_port | -31\n tcp_v6_hash | -7\n tcp_v6_syn_recv_sock | -9\n 3 functions changed, 47 bytes removed, diff: -47\n\n/home/acme/git/net-2.6/net/dccp/proto.c:\n dccp_destroy_sock | -7\n dccp_unhash | -179\n dccp_hash | -49\n dccp_set_state | -7\n dccp_done | +1\n 5 functions changed, 1 bytes added, 242 bytes removed, diff: -241\n\n/home/acme/git/net-2.6/net/dccp/ipv4.c:\n dccp_v4_get_port | -31\n dccp_v4_request_recv_sock | -2\n 2 functions changed, 33 bytes removed, diff: -33\n\n/home/acme/git/net-2.6/net/dccp/ipv6.c:\n dccp_v6_get_port | -31\n dccp_v6_hash | -7\n dccp_v6_request_recv_sock | +5\n 3 functions changed, 5 bytes added, 38 bytes removed, diff: -33\n\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "23717795bee15470b96f9b7aa5ecf4efe14c8e32", "tree": "5c9f3d3fc0ef0cddd1af52737128185d90dda9ba", "parents": [ "fa4d3c6210380c55cf7f295d28fd981fbcbb828c" ], "author": { "name": "Jim Paris", "email": "jim@jtan.com", "time": "Thu Jan 31 16:36:25 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:21 2008 -0800" }, "message": "[IPV6]: Update MSS even if MTU is unchanged.\n\nThis is needed because in ndisc.c, we have:\n\n static void ndisc_router_discovery(struct sk_buff *skb)\n {\n // ...\n \tif (ndopts.nd_opts_mtu) {\n // ...\n \t\t\tif (rt)\n \t\t\t\trt-\u003eu.dst.metrics[RTAX_MTU-1] \u003d mtu;\n\n \t\t\trt6_mtu_change(skb-\u003edev, mtu);\n // ...\n }\n\nSince the mtu is set directly here, rt6_mtu_change_route thinks that\nit is unchanged, and so it fails to update the MSS accordingly. This\npatch lets rt6_mtu_change_route still update MSS if old_mtu \u003d\u003d new_mtu.\n\nSigned-off-by: Jim Paris \u003cjim@jtan.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fa4d3c6210380c55cf7f295d28fd981fbcbb828c", "tree": "0161c8574349adb4eb93b2996dacf70b472696ac", "parents": [ "d86e0dac2ce412715181f792aa0749fe3effff11" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Thu Jan 31 05:07:57 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:21 2008 -0800" }, "message": "[NETNS]: Udp sockets per-net lookup.\n\nAdd the net parameter to udp_get_port family of calls and\nudp_lookup one and use it to filter sockets.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d86e0dac2ce412715181f792aa0749fe3effff11", "tree": "bc9197a7316c7d7641112d5f5975d8b91afdbd08", "parents": [ "c67499c0e772064b37ad75eb69b28fc218752636" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Thu Jan 31 05:07:21 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:20 2008 -0800" }, "message": "[NETNS]: Tcp-v6 sockets per-net lookup.\n\nAdd a net argument to inet6_lookup and propagate it further.\nActually, this is tcp-v6 implementation of what was done for\ntcp-v4 sockets in a previous patch.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5ee31fc1ecdcbc234c8c56dcacef87c8e09909d8", "tree": "5fe73acbcf784f9ee326d7d10ae217c7b4eb13ee", "parents": [ "535174efbe0f0454f0595c31b823498c197eeb4f" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Thu Jan 31 05:04:45 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:17 2008 -0800" }, "message": "[INET]: Consolidate inet(6)_hash_connect.\n\nThese two functions are the same except for what they call\nto \"check_established\" and \"hash\" for a socket.\n\nThis saves half-a-kilo for ipv4 and ipv6.\n\n add/remove: 1/0 grow/shrink: 1/4 up/down: 582/-1128 (-546)\n function old new delta\n __inet_hash_connect - 577 +577\n arp_ignore 108 113 +5\n static.hint 8 4 -4\n rt_worker_func 376 372 -4\n inet6_hash_connect 584 25 -559\n inet_hash_connect 586 25 -561\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "535174efbe0f0454f0595c31b823498c197eeb4f", "tree": "7fc438f82e73f117882e31b6f7025e295e399b09", "parents": [ "22e0e62cd09dcf56fe1a7be66698b6e130e4314c" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Thu Jan 31 05:03:27 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:17 2008 -0800" }, "message": "[IPV6]: Introduce the INET6_TW_MATCH macro.\n\nWe have INET_MATCH, INET_TW_MATCH and INET6_MATCH to test sockets and\ntwbuckets for matching, but ipv6 twbuckets are tested manually.\n\nHere\u0027s the INET6_TW_MATCH to help with it.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c392a7401807de25a9c7e0234dddbdf40b10c594", "tree": "57940df8f7c31574d1988f2a682fa6755b8e10a4", "parents": [ "32948588ac4ec54300bae1037e839277fd4536e2" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Jan 31 04:54:18 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:14 2008 -0800" }, "message": "[NETFILTER]: {ip,ip6}_queue: fix build error\n\nReported by Ingo Molnar:\n\n net/built-in.o: In function `ip_queue_init\u0027:\n ip_queue.c:(.init.text+0x322c): undefined reference to `net_ipv4_ctl_path\u0027\n\nFix the build error and also handle CONFIG_PROC_FS\u003dn properly.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "32948588ac4ec54300bae1037e839277fd4536e2", "tree": "69836aa043bcd3b5207047558bbbd4866f97dc36", "parents": [ "7cc3864d39837549c5ccb33c5b85183d6e6986bc" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@computergmbh.de", "time": "Thu Jan 31 04:53:24 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:13 2008 -0800" }, "message": "[NETFILTER]: nf_conntrack: annotate l3protos with const\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@computergmbh.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7cc3864d39837549c5ccb33c5b85183d6e6986bc", "tree": "6eea6059e6e133f82e8998664af789ab50ee7d39", "parents": [ "dc35dc5a4c8e7752c82643ff2ad442685331ab28" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@computergmbh.de", "time": "Thu Jan 31 04:53:05 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:12 2008 -0800" }, "message": "[NETFILTER]: nf_{conntrack,nat}_icmp: constify and annotate\n\nConstify a few data tables use const qualifiers on variables where\npossible in the nf_conntrack_icmp* sources.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@computergmbh.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3cb609d57c20027a8b39fc60b79b930a89da82d4", "tree": "f88a4d355b6612665a0ea89ac91a746c06e2c3cc", "parents": [ "715cf35ac9291f31a4fea7d022695a64cac0af80" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Thu Jan 31 04:49:35 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:28:06 2008 -0800" }, "message": "[NETFILTER]: x_tables: create per-netns /proc/net/*_tables_*\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c88130bcd546e73e66165f9c29113dae9facf1ec", "tree": "fd4992c4126c7ad771d297c778ee177f4fb06a72", "parents": [ "76eb946040a7b4c797979a9c22464b9a07890ba5" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Jan 31 04:42:11 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:59 2008 -0800" }, "message": "[NETFILTER]: nf_conntrack: naming unification\n\nRename all \"conntrack\" variables to \"ct\" for more consistency and\navoiding some overly long lines.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "99fa5f53975b4c09beb5d11ed7418fee2dfb43e3", "tree": "9bc31eb9db3ff1b4359d753f83e3b2129ed83e82", "parents": [ "b0a6363c2418c93f25dd30b8ffcd3fdd4ce23ad6" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Jan 31 04:10:40 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:49 2008 -0800" }, "message": "[NETFILTER]: nf_conntrack_ipv6: fix sparse warnings\n\n CHECK net/ipv6/netfilter/nf_conntrack_reasm.c\n net/ipv6/netfilter/nf_conntrack_reasm.c:77:18: warning: symbol \u0027nf_ct_ipv6_sysctl_table\u0027 was not declared. Should it be static?\n net/ipv6/netfilter/nf_conntrack_reasm.c:586:16: warning: symbol \u0027nf_ct_frag6_gather\u0027 was not declared. Should it be static?\n net/ipv6/netfilter/nf_conntrack_reasm.c:662:6: warning: symbol \u0027nf_ct_frag6_output\u0027 was not declared. Should it be static?\n net/ipv6/netfilter/nf_conntrack_reasm.c:683:5: warning: symbol \u0027nf_ct_frag6_kfree_frags\u0027 was not declared. Should it be static?\n net/ipv6/netfilter/nf_conntrack_reasm.c:698:5: warning: symbol \u0027nf_ct_frag6_init\u0027 was not declared. Should it be static?\n net/ipv6/netfilter/nf_conntrack_reasm.c:717:6: warning: symbol \u0027nf_ct_frag6_cleanup\u0027 was not declared. Should it be static?\n\nBased on patch by Stephen Hemminger with suggestions by Yasuyuki KOZAKAI.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b0a6363c2418c93f25dd30b8ffcd3fdd4ce23ad6", "tree": "81bf6cdd227ef619b8e8cb29674568725459a2fe", "parents": [ "855304af29c042e002d902997661ec3dd507df0d" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Jan 31 04:10:18 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:49 2008 -0800" }, "message": "[NETFILTER]: {ip,arp,ip6}_tables: fix sparse warnings in compat code\n\n CHECK net/ipv4/netfilter/ip_tables.c\nnet/ipv4/netfilter/ip_tables.c:1453:8: warning: incorrect type in argument 3 (different signedness)\nnet/ipv4/netfilter/ip_tables.c:1453:8: expected int *size\nnet/ipv4/netfilter/ip_tables.c:1453:8: got unsigned int [usertype] *size\nnet/ipv4/netfilter/ip_tables.c:1458:44: warning: incorrect type in argument 3 (different signedness)\nnet/ipv4/netfilter/ip_tables.c:1458:44: expected int *size\nnet/ipv4/netfilter/ip_tables.c:1458:44: got unsigned int [usertype] *size\nnet/ipv4/netfilter/ip_tables.c:1603:2: warning: incorrect type in argument 2 (different signedness)\nnet/ipv4/netfilter/ip_tables.c:1603:2: expected unsigned int *i\nnet/ipv4/netfilter/ip_tables.c:1603:2: got int *\u003cnoident\u003e\nnet/ipv4/netfilter/ip_tables.c:1627:8: warning: incorrect type in argument 3 (different signedness)\nnet/ipv4/netfilter/ip_tables.c:1627:8: expected int *size\nnet/ipv4/netfilter/ip_tables.c:1627:8: got unsigned int *size\nnet/ipv4/netfilter/ip_tables.c:1634:40: warning: incorrect type in argument 3 (different signedness)\nnet/ipv4/netfilter/ip_tables.c:1634:40: expected int *size\nnet/ipv4/netfilter/ip_tables.c:1634:40: got unsigned int *size\nnet/ipv4/netfilter/ip_tables.c:1653:8: warning: incorrect type in argument 5 (different signedness)\nnet/ipv4/netfilter/ip_tables.c:1653:8: expected unsigned int *i\nnet/ipv4/netfilter/ip_tables.c:1653:8: got int *\u003cnoident\u003e\nnet/ipv4/netfilter/ip_tables.c:1666:2: warning: incorrect type in argument 2 (different signedness)\nnet/ipv4/netfilter/ip_tables.c:1666:2: expected unsigned int *i\nnet/ipv4/netfilter/ip_tables.c:1666:2: got int *\u003cnoident\u003e\n CHECK net/ipv4/netfilter/arp_tables.c\nnet/ipv4/netfilter/arp_tables.c:1285:40: warning: incorrect type in argument 3 (different signedness)\nnet/ipv4/netfilter/arp_tables.c:1285:40: expected int *size\nnet/ipv4/netfilter/arp_tables.c:1285:40: got unsigned int *size\nnet/ipv4/netfilter/arp_tables.c:1543:44: warning: incorrect type in argument 3 (different signedness)\nnet/ipv4/netfilter/arp_tables.c:1543:44: expected int *size\nnet/ipv4/netfilter/arp_tables.c:1543:44: got unsigned int [usertype] *size\n CHECK net/ipv6/netfilter/ip6_tables.c\nnet/ipv6/netfilter/ip6_tables.c:1481:8: warning: incorrect type in argument 3 (different signedness)\nnet/ipv6/netfilter/ip6_tables.c:1481:8: expected int *size\nnet/ipv6/netfilter/ip6_tables.c:1481:8: got unsigned int [usertype] *size\nnet/ipv6/netfilter/ip6_tables.c:1486:44: warning: incorrect type in argument 3 (different signedness)\nnet/ipv6/netfilter/ip6_tables.c:1486:44: expected int *size\nnet/ipv6/netfilter/ip6_tables.c:1486:44: got unsigned int [usertype] *size\nnet/ipv6/netfilter/ip6_tables.c:1631:2: warning: incorrect type in argument 2 (different signedness)\nnet/ipv6/netfilter/ip6_tables.c:1631:2: expected unsigned int *i\nnet/ipv6/netfilter/ip6_tables.c:1631:2: got int *\u003cnoident\u003e\nnet/ipv6/netfilter/ip6_tables.c:1655:8: warning: incorrect type in argument 3 (different signedness)\nnet/ipv6/netfilter/ip6_tables.c:1655:8: expected int *size\nnet/ipv6/netfilter/ip6_tables.c:1655:8: got unsigned int *size\nnet/ipv6/netfilter/ip6_tables.c:1662:40: warning: incorrect type in argument 3 (different signedness)\nnet/ipv6/netfilter/ip6_tables.c:1662:40: expected int *size\nnet/ipv6/netfilter/ip6_tables.c:1662:40: got unsigned int *size\nnet/ipv6/netfilter/ip6_tables.c:1680:8: warning: incorrect type in argument 5 (different signedness)\nnet/ipv6/netfilter/ip6_tables.c:1680:8: expected unsigned int *i\nnet/ipv6/netfilter/ip6_tables.c:1680:8: got int *\u003cnoident\u003e\nnet/ipv6/netfilter/ip6_tables.c:1693:2: warning: incorrect type in argument 2 (different signedness)\nnet/ipv6/netfilter/ip6_tables.c:1693:2: expected unsigned int *i\nnet/ipv6/netfilter/ip6_tables.c:1693:2: got int *\u003cnoident\u003e\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "df200969b1627e8f1cda7ce8c0707863f91bb81b", "tree": "3dbc2d882177568f8c0047b5e10597af12599f67", "parents": [ "9ea0cb2601c4747dff758a9a7a5a4a433ad527f3" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Thu Jan 31 04:05:34 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:41 2008 -0800" }, "message": "[NETFILTER]: netns: put table module on netns stop\n\nWhen number of entries exceeds number of initial entries, foo-tables code\nwill pin table module. But during table unregister on netns stop,\nthat additional pin was forgotten.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8280aa6182f03c4e27dc235ce0440bc94927dc28", "tree": "aff3a05fabf07b8bb17d0e0867a48fdcf4921045", "parents": [ "336b517fdc0f92f54a3f77a2d0933f9556aa79ad" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Thu Jan 31 04:04:13 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:39 2008 -0800" }, "message": "[NETFILTER]: ip6_tables: per-netns IPv6 FILTER, MANGLE, RAW\n\nNow it\u0027s possible to list and manipulate per-netns ip6tables rules.\nFiltering decisions are based on init_net\u0027s table so far.\n\nP.S.: remove init_net check in inet6_create() to see the effect\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "336b517fdc0f92f54a3f77a2d0933f9556aa79ad", "tree": "49fe68be0a741de7370196be70afaa71a990e38f", "parents": [ "9335f047fe61587ec82ff12fbb1220bcfdd32006" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Thu Jan 31 04:03:45 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:39 2008 -0800" }, "message": "[NETFILTER]: ip6_tables: netns preparation\n\n* Propagate netns from userspace down to xt_find_table_lock()\n* Register ip6 tables in netns (modules still use init_net)\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "44d34e721e2c81ccdfb13cf34996309247ae2981", "tree": "fec2063c8573700fd01cb6c11875769751744603", "parents": [ "8d870052079d255917ec4f8431f5ec102707b7af" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Thu Jan 31 04:02:44 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:36 2008 -0800" }, "message": "[NETFILTER]: x_tables: return new table from {arp,ip,ip6}t_register_table()\n\nTypical table module registers xt_table structure (i.e. packet_filter)\nand link it to list during it. We can\u0027t use one template for it because\ncorresponding list_head will become corrupted. We also can\u0027t unregister\nwith template because it wasn\u0027t changed at all and thus doesn\u0027t know in\nwhich list it is.\n\nSo, we duplicate template at the very first step of table registration.\nTable modules will save it for use during unregistration time and actual\nfiltering.\n\nDo it at once to not screw bisection.\n\nP.S.: renaming i.e. packet_filter \u003d\u003e __packet_filter is temporary until\n full netnsization of table modules is done.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8d870052079d255917ec4f8431f5ec102707b7af", "tree": "77ab4f07ef4980d179c4e47d3a6e034c055f9bdf", "parents": [ "a98da11d88dbec1d5cebe2c6dbe9939ed8d13f69" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Thu Jan 31 04:02:13 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:35 2008 -0800" }, "message": "[NETFILTER]: x_tables: per-netns xt_tables\n\nIn fact all we want is per-netns set of rules, however doing that will\nunnecessary complicate routines such as ipt_hook()/ipt_do_table, so\nmake full xt_table array per-netns.\n\nEvery user stubbed with init_net for a while.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a98da11d88dbec1d5cebe2c6dbe9939ed8d13f69", "tree": "25244c2368a90e1f9bf4b478829590a52b0b5e8c", "parents": [ "30083c9500b8aa3bc48579eaadb5068ad057afbd" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Thu Jan 31 04:01:49 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:35 2008 -0800" }, "message": "[NETFILTER]: x_tables: change xt_table_register() return value convention\n\nSwitch from 0/-E to ptr/PTR_ERR convention.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ecb6f85e11627a0fb26a7e2db0d3603c0d602937", "tree": "c8cd4e23bb646fbab3e0d8f3ddc6535cff297b1d", "parents": [ "ca7c48ca97e5e1d9dbc26cef165814f96d38d96b" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@computergmbh.de", "time": "Thu Jan 31 03:54:47 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:28 2008 -0800" }, "message": "[NETFILTER]: Use const in struct xt_match, xt_target, xt_table\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@computergmbh.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3046d76746311ac7ff0cdc3ec42db15730528dbf", "tree": "575b92705383d8ae67aee0511cdbf46bb4de9ef9", "parents": [ "8cd850efa4948d57a2ed836911cfd1ab299e89c6" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Thu Jan 31 03:48:55 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:26 2008 -0800" }, "message": "[RAW]: Wrong content of the /proc/net/raw6.\n\nThe address of IPv6 raw sockets was shown in the wrong format, from\nIPv4 ones. The problem has been introduced by the commit\n42a73808ed4f30b739eb52bcbb33a02fe62ceef5 (\"[RAW]: Consolidate proc\ninterface.\")\n\nThanks to Adrian Bunk who originally noticed the problem.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "377cf82d66ea43f3d3cb82c2563e65b5c12c9bfd", "tree": "9bce5ff5153b91104dcf560626a12289d013809e", "parents": [ "b1641064a3f4a58644bc2e8edf40c025c58473b4" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Thu Jan 31 03:46:12 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:24 2008 -0800" }, "message": "[RAW]: Family check in the /proc/net/raw[6] is extra.\n\nDifferent hashtables are used for IPv6 and IPv4 raw sockets, so no\nneed to check the socket family in the iterator over hashtables. Clean\nthis out.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e242297055f906e8e225fb95a8edbc88e9052634", "tree": "d0fb2d3ba0273bd621681b8de7621ee9b73baf44", "parents": [ "ad1984e844fb6edaa8b9984be23669f4e19168be" ], "author": { "name": "Eric Dumazet", "email": "dada1@cosmosbay.com", "time": "Wed Jan 30 20:07:45 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:23 2008 -0800" }, "message": "[NET]: should explicitely initialize atomic_t field in struct dst_ops\n\nAll but one struct dst_ops static initializations miss explicit\ninitialization of entries field.\n\nAs this field is atomic_t, we should use ATOMIC_INIT(0), and not\nrely on atomic_t implementation.\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "533cb5b0a63f28ecab5503cfceb77e641fa7f7c4", "tree": "62e7d7c65776c5fb30a8ff10fb3049e63257331c", "parents": [ "2216b48376c40cf6984398d478a01b55e76c5434" ], "author": { "name": "Eric Dumazet", "email": "dada1@cosmosbay.com", "time": "Wed Jan 30 19:11:50 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:20 2008 -0800" }, "message": "[XFRM]: constify \u0027struct xfrm_type\u0027\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2216b48376c40cf6984398d478a01b55e76c5434", "tree": "a8f68ed7dd47c4bc9ddffcaa95a987ae15d40e22", "parents": [ "4a19ec5800fc3bb64e2d87c4d9fdd9e636086fe0" ], "author": { "name": "Benjamin Thery", "email": "benjamin.thery@bull.net", "time": "Wed Jan 30 19:09:35 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:20 2008 -0800" }, "message": "[NETNS]: Add missing initialization of nl_info.nl_net in rtm_to_fib6_config()\n\nAdd missing initialization of the new nl_info.nl_net field in\nrtm_to_fib6_config(). This will be needed the store network namespace\nassociated to the fib6_config struct.\n\nSigned-off-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4a19ec5800fc3bb64e2d87c4d9fdd9e636086fe0", "tree": "610bd4e7dbcbdae25ba3806f4256745e98617825", "parents": [ "036c2e27bc3a6498afb35de017d810194032d765" ], "author": { "name": "Laszlo Attila Toth", "email": "panther@balabit.hu", "time": "Wed Jan 30 19:08:16 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:19 2008 -0800" }, "message": "[NET]: Introducing socket mark socket option.\n\nA userspace program may wish to set the mark for each packets its send\nwithout using the netfilter MARK target. Changing the mark can be used\nfor mark based routing without netfilter or for packet filtering.\n\nIt requires CAP_NET_ADMIN capability.\n\nSigned-off-by: Laszlo Attila Toth \u003cpanther@balabit.hu\u003e\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2614fa59fa805cd488083c5602eb48533cdbc018", "tree": "604fcae5cb381eadb8d8e13e0bef42a7e0c13d11", "parents": [ "936f6f8e1bc46834bbb3e3fa3ac13ab44f1e7ba6" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Jan 29 21:11:46 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:11 2008 -0800" }, "message": "[IPCOMP]: Fetch nexthdr before ipch is destroyed\n\nWhen I moved the nexthdr setting out of IPComp I accidently moved\nthe reading of ipch-\u003enexthdr after the decompression. Unfortunately\nthis means that we\u0027d be reading from a stale ipch pointer which\ndoesn\u0027t work very well.\n\nThis patch moves the reading up so that we get the correct nexthdr\nvalue.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "29ffe1a5c52dae13b6efead97aab9b058f38fce4", "tree": "bcca1391f02a01cf1b2d5942a06d392ac0f5be11", "parents": [ "1987e7b4855fcb6a866d3279ee9f2890491bc34d" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jan 28 20:45:20 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:07 2008 -0800" }, "message": "[INET]: Prevent out-of-sync truesize on ip_fragment slow path\n\nWhen ip_fragment has to hit the slow path the value of skb-\u003etruesize\nmay go out of sync because we would have updated it without changing\nthe packet length. This violates the constraints on truesize.\n\nThis patch postpones the update of skb-\u003etruesize to prevent this.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1a6509d991225ad210de54c63314fd9542922095", "tree": "afe5c560388558bebd3e21b7c6f789a28a323a51", "parents": [ "6fbf2cb77461a0cd0675228d20dd0f70d7b2251f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jan 28 19:37:29 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:03 2008 -0800" }, "message": "[IPSEC]: Add support for combined mode algorithms\n\nThis patch adds support for combined mode algorithms with GCM being\nthe first algorithm supported.\n\nCombined mode algorithms can be added through the xfrm_user interface\nusing the new algorithm payload type XFRMA_ALG_AEAD. Each algorithms\nis identified by its name and the ICV length.\n\nFor the purposes of matching algorithms in xfrm_tmpl structures,\ncombined mode algorithms occupy the same name space as encryption\nalgorithms. This is in line with how they are negotiated using IKE.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "38320c70d282be1997a5204c7c7fe14c3aa6bfaa", "tree": "aa86d8c3e26a3cc6d283a31b21116a35c7659f8f", "parents": [ "bf164cc054d568fa7889ffab41d3b091f5758c75" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jan 28 19:35:05 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:02 2008 -0800" }, "message": "[IPSEC]: Use crypto_aead and authenc in ESP\n\nThis patch converts ESP to use the crypto_aead interface and in particular\nthe authenc algorithm. This lays the foundations for future support of\ncombined mode algorithms.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "44c45eb911845ec58fc3e26cc8994ba868ea2572", "tree": "44138a5a2b3b7631f426170582e27f02bedaec2e", "parents": [ "85004cc367abc000aa36c0d0e270ab609a68b0cb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 31 00:26:10 2008 +1100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jan 31 00:26:10 2008 +1100" }, "message": "Make !NETFILTER_ADVANCED enable IP6_NF_MATCH_IPV6HEADER\n\nWe want IPV6HEADER matching for the non-advanced default netfilter\nconfiguration, since it\u0027s part of the standard netfilter setup of at\nleast some distributions (eg Fedora).\n\nOtherwise NETFILTER_ADVANCED loses much of its point, since even\nnon-advanced users would have to enable all the advanced options just to\nget a working IPv6 netfilter setup.\n\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "85040bcb4643cba578839e953f25e2d1965d83d0", "tree": "d43d6a0d92e2957be260312214084131cf659833", "parents": [ "3c582b30bc2592081e9b23e253ca098fa7d57dc2" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Mon Jan 28 15:46:02 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:46:02 2008 -0800" }, "message": "[IPV6] ADDRLABEL: Fix double free on label deletion.\n\nIf an entry is being deleted because it has only one reference, \nwe immediately delete it and blindly register the rcu handler for it,\nThis results in oops by double freeing that object.\n\nThis patch fixes it by consolidating the code paths for the deletion;\nlet its rcu handler delete the object if it has no more reference.\n\nBug was found by Mitsuru Chinen \u003cmitch@linux.vnet.ibm.com\u003e\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f206351a50ea86250fabea96b9af8d8f8fc02603", "tree": "014148d8b45db1995d98374ec3b30e635f243197", "parents": [ "f1b050bf7a88910f9f00c9c8989c1bf5a67dd140" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Tue Jan 22 22:07:34 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:11:07 2008 -0800" }, "message": "[NETNS]: Add namespace parameter to ip_route_output_key.\n\nNeeded to propagate it down to the ip_route_output_flow.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "81566e8322c3f6c6f9a2277fe0e440fee8d917bd", "tree": "2c7456cf77548436e97ae8fef5c1f91127e8fd92", "parents": [ "3140c25c82106645a6b1fc469dab7006a1d09fd0" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:12:39 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:40 2008 -0800" }, "message": "[NETNS][FRAGS]: Make the pernet subsystem for fragments.\n\nOn namespace start we mainly prepare the ctl variables.\n\nWhen the namespace is stopped we have to kill all the fragments that\npoint to this namespace. The inet_frags_exit_net() handles it.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3140c25c82106645a6b1fc469dab7006a1d09fd0", "tree": "cbf97e7138610c1f1f0ad4528d59b4bbd14039c7", "parents": [ "3b4bc4a2bfe80d01ebd4f2b6dcc58986c970ed16" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:11:48 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:39 2008 -0800" }, "message": "[NETNS][FRAGS]: Make the LRU list per namespace.\n\nThe inet_frags.lru_list is used for evicting only, so we have\nto make it per-namespace, to evict only those fragments, who\u0027s\nnamespace exceeded its high threshold, but not the whole hash.\nBesides, this helps to avoid long loops in evictor.\n\nThe spinlock is not per-namespace because it protects the\nhash table as well, which is global.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3b4bc4a2bfe80d01ebd4f2b6dcc58986c970ed16", "tree": "d9dea3af7fb8fc828af0ba484c1fc06007dce351", "parents": [ "e31e0bdc7e7fb9a4b09d2f3266c035a18fdcee9d" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:11:04 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:39 2008 -0800" }, "message": "[NETNS][FRAGS]: Isolate the secret interval from namespaces.\n\nSince we have one hashtable to lookup the fragment, having\ndifferent secret_interval-s for hash rebuild doesn\u0027t make\nsense, so move this one to inet_frags.\n\nThe inet_frags_ctl becomes empty after this, so remove it.\nThe appropriate ctl table is kept read-only in namespaces.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e31e0bdc7e7fb9a4b09d2f3266c035a18fdcee9d", "tree": "30e25f733781cf80aa9fef0d58ff3476424cb9b3", "parents": [ "b2fd5321dd160ef309dfb6cfc78ed8de4a830659" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:10:13 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:38 2008 -0800" }, "message": "[NETNS][FRAGS]: Make thresholds work in namespaces.\n\nThis is the same as with the timeout variable.\n\nCurrently, after exceeding the high threshold _all_\nthe fragments are evicted, but it will be fixed in\nlater patch.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b2fd5321dd160ef309dfb6cfc78ed8de4a830659", "tree": "48d56923c239a2f5174e82528ee2632e159d33a7", "parents": [ "e4a2d5c2bccd5bd29de5ae4f14ff4448fac9cfc8" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:09:37 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:37 2008 -0800" }, "message": "[NETNS][FRAGS]: Make the net.ipv4.ipfrag_timeout work in namespaces.\n\nMove it to the netns_frags, adjust the usage and\nmake the appropriate ctl table writable.\n\nNow fragment, that live in different namespaces can\nlive for different times.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e4a2d5c2bccd5bd29de5ae4f14ff4448fac9cfc8", "tree": "e6ae6835ec20401b1a59de0c8c0f8519fba3a4b4", "parents": [ "6ddc082223ef0f73717b4133fa7e648842bbfd02" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:08:36 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:37 2008 -0800" }, "message": "[NETNS][FRAGS]: Duplicate sysctl tables for new namespaces.\n\nEach namespace has to have own tables to tune their\ndifferent parameters, so duplicate the tables and\nregister them.\n\nAll the tables in sub-namespaces are temporarily made\nread-only.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6ddc082223ef0f73717b4133fa7e648842bbfd02", "tree": "62315ac04e396bc6e68543502fb6aeec50be6662", "parents": [ "e5a2bb842cd9681d00d4ca963e63e4d3647e66f8" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:07:25 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:36 2008 -0800" }, "message": "[NETNS][FRAGS]: Make the mem counter per-namespace.\n\nThis is also simple, but introduces more changes, since\nthen mem counter is altered in more places.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e5a2bb842cd9681d00d4ca963e63e4d3647e66f8", "tree": "b47692f3312039cb944f68f6fbeb0d10442f8056", "parents": [ "ac18e7509e7df327e30d6e073a787d922eaf211d" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:06:23 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:35 2008 -0800" }, "message": "[NETNS][FRAGS]: Make the nqueues counter per-namespace.\n\nThis is simple - just move the variable from struct inet_frags\nto struct netns_frags and adjust the usage appropriately.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ac18e7509e7df327e30d6e073a787d922eaf211d", "tree": "26be1582b59956c389a667d5426fdc538072795b", "parents": [ "8d8354d2fb9277f165715a6e1cb92bcc89259975" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 06:02:14 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:34 2008 -0800" }, "message": "[NETNS][FRAGS]: Make the inet_frag_queue lookup work in namespaces.\n\nSince fragment management code is consolidated, we cannot have the\npointer from inet_frag_queue to struct net, since we must know what\nking of fragment this is.\n\nSo, I introduce the netns_frags structure. This one is currently\nempty, but will be eventually filled with per-namespace\nattributes. Each inet_frag_queue is tagged with this one.\n\nThe conntrack_reasm is not \"netns-izated\", so it has one static\nnetns_frags instance to keep working in init namespace.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8d8354d2fb9277f165715a6e1cb92bcc89259975", "tree": "465fd866b6f5b4ab9c05a5441697c07502d0f0ed", "parents": [ "9d5c824399dea881779d78a6c147288bf2dccb6b" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Tue Jan 22 05:58:31 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:34 2008 -0800" }, "message": "[NETNS][FRAGS]: Move ctl tables around.\n\nThis is a preparation for sysctl netns-ization.\nMove the ctl tables to the files, where the tuning\nvariables reside. Plus make the helpers to register\nthe tables.\n\nThis will simplify the later patches and will keep\nsimilar things closer to each other.\n\nipv4, ipv6 and conntrack_reasm are patched differently,\nbut the result is all the tables are in appropriate files.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "61cf46ad581ba43073d3bcb0be549eb60fbbf9f8", "tree": "941a5d5619e050833477765f82bfcea322d97047", "parents": [ "5d5619b40c2474de01c64bdf6bb9f1211d3e967a" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jan 22 17:32:53 2008 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:28 2008 -0800" }, "message": "[IPV6] NDISC: Sparse: Use different variable name for local use.\n\nFix the following sparse warnings:\n| net/ipv6/ndisc.c:1300:21: warning: symbol \u0027opt\u0027 shadows an earlier one\n| net/ipv6/ndisc.c:1078:7: originally declared here\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "5d5619b40c2474de01c64bdf6bb9f1211d3e967a", "tree": "4e128d0dad98f351973edf7af1989343371465b4", "parents": [ "2334ecbdb27bd1745c0fc6d05cce09ed9585e4c1" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jan 22 17:29:40 2008 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:28 2008 -0800" }, "message": "[IPV6] ADDRCONF: Sparse: Make inet6_dump_addr() code paths more straight-forward.\n\nFix the following sparse warning:\n| net/ipv6/addrconf.c:3384:2: warning: context imbalance in \u0027inet6_dump_addr\u0027 - different lock contexts for basic block\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "2334ecbdb27bd1745c0fc6d05cce09ed9585e4c1", "tree": "58f31ad3d238fbb8e1073770f8f483ae2a752aa1", "parents": [ "40fee36e11b49f92bc7c385bd45d7805c0127a34" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jan 22 17:18:38 2008 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:27 2008 -0800" }, "message": "[IPV6]: Sparse: Declare non-static ipv6_{route,icmp,frag}_sysctl_init() in header.\n\nFix the following sparse warnings:\n| net/ipv6/route.c:2491:18: warning: symbol \u0027ipv6_route_sysctl_init\u0027 was not declared. Should it be static?\n| net/ipv6/icmp.c:922:18: warning: symbol \u0027ipv6_icmp_sysctl_init\u0027 was not declared. Should it be static?\n| net/ipv6/reassembly.c:628:6: warning: symbol \u0027ipv6_frag_sysctl_init\u0027 was not declared. Should it be static?\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "40fee36e11b49f92bc7c385bd45d7805c0127a34", "tree": "a4dbf5f7ae9ba214c902f0c43c0546a59db8a029", "parents": [ "5e8b9df6e8786e4d5ee5ac951240cb2eaaac3014" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jan 22 17:12:50 2008 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:26 2008 -0800" }, "message": "[IPV6] ADDRLABEL: Sparse: Make several functions static.\n\nFix following sparse warnings:\n| net/ipv6/addrlabel.c:172:25: warning: symbol \u0027ip6addrlbl_alloc\u0027 was not declared. Should it be static?\n| net/ipv6/addrlabel.c:219:5: warning: symbol \u0027__ip6addrlbl_add\u0027 was not declared. Should it be static?\n| net/ipv6/addrlabel.c:260:5: warning: symbol \u0027ip6addrlbl_add\u0027 was not declared. Should it be static?\n| net/ipv6/addrlabel.c:285:5: warning: symbol \u0027__ip6addrlbl_del\u0027 was not declared. Should it be static?\n| net/ipv6/addrlabel.c:311:5: warning: symbol \u0027ip6addrlbl_del\u0027 was not declared. Should it be static?\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "5e8b9df6e8786e4d5ee5ac951240cb2eaaac3014", "tree": "b0c201341ddcf4194260f09ae3a79ba45af8346e", "parents": [ "77d0d350e96c9453be255d8eff8dc97555710b17" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jan 22 17:25:46 2008 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:26 2008 -0800" }, "message": "[IPV6] UDPLITE: Sparse: Declare non-static symbols in header.\n\nFix the following sparse warnings:\n| net/ipv6/udplite.c:45:14: warning: symbol \u0027udplitev6_prot\u0027 was not declared. Should it be static?\n| net/ipv6/udplite.c:80:12: warning: symbol \u0027udplitev6_init\u0027 was not declared. Should it be static?\n| net/ipv6/udplite.c:99:6: warning: symbol \u0027udplitev6_exit\u0027 was not declared. Should it be static?\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "77d0d350e96c9453be255d8eff8dc97555710b17", "tree": "af9c7bce950469d4b946cfc3663fe60cf3227442", "parents": [ "fc80be87dca8968fa087aae81544ba3f86afdd50" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jan 22 17:09:55 2008 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:10:25 2008 -0800" }, "message": "[IPV6] UDP,UDPLITE: Sparse: {__udp6_lib,udp,udplite}_err() are of void.\n\nFix following sparse warnings:\n| net/ipv6/udp.c:262:2: warning: returning void-valued expression\n| net/ipv6/udplite.c:29:2: warning: returning void-valued expression\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "d20b3109e9d122460929c50b857fcde251706ece", "tree": "9f500808c0c07cc7c59eba3afa13a8a25109a3a9", "parents": [ "13a0a096e58a1149a8cffbd7722b820044e3801e" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@vyatta.com", "time": "Mon Jan 21 00:48:43 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:08:37 2008 -0800" }, "message": "[IPV6]: addrconf sparse warnings\n\nGet rid of a couple of sparse warnings in IPV6 addrconf code.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9e3a548781fc1c0da617fc65769a515f074be740", "tree": "fee75c4308276a37e6f1c0f55335332463bb3e7e", "parents": [ "035923833369e4da5d3c4ad0700bc7c367a0fa37" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Sun Jan 20 16:46:41 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:08:13 2008 -0800" }, "message": "[NETNS]: FIB rules API cleanup.\n\nRemove struct net from fib_rules_register(unregister)/notify_change\npaths and diet code size a bit.\n\nadd/remove: 0/0 grow/shrink: 10/12 up/down: 35/-100 (-65)\nfunction old new delta\nnotify_rule_change 273 280 +7\ntrie_show_stats 471 475 +4\nfn_trie_delete 473 477 +4\nfib_rules_unregister 144 148 +4\nfib4_rule_compare 119 123 +4\nresize 2842 2845 +3\nfn_trie_select_default 515 518 +3\ninet_sk_rebuild_header 836 838 +2\nfib_trie_seq_show 764 766 +2\n__devinet_sysctl_register 276 278 +2\nfn_trie_lookup 1124 1123 -1\nip_fib_check_default 133 131 -2\ndevinet_conf_sysctl 223 221 -2\nsnmp_fold_field 126 123 -3\nfn_trie_insert 2091 2086 -5\ninet_create 876 870 -6\nfib4_rules_init 197 191 -6\nfib_sync_down 452 444 -8\ninet_gso_send_check 334 325 -9\nfib_create_info 3003 2991 -12\nfib_nl_delrule 568 553 -15\nfib_nl_newrule 883 852 -31\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nAcked-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "035923833369e4da5d3c4ad0700bc7c367a0fa37", "tree": "2a7e3105e70a543ff2611ffbe7612b4c93ce3bd5", "parents": [ "853f4b505578ea3a1d9c2f5fb4ca58658ea15780" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Sun Jan 20 16:46:01 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:08:13 2008 -0800" }, "message": "[FIB]: Add netns to fib_rules_ops.\n\nThe backward link from FIB rules operations to the network namespace\nwill allow to simplify the API a bit.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nAcked-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b7c6ba6eb1234e35a74fb8ba8123232a7b1ba9e4", "tree": "672c08c95229a6ac242ab12a5195dceddb0f3127", "parents": [ "4f84d82f7a623f8641af2574425c329431ff158f" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Mon Jan 28 14:41:19 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:08:07 2008 -0800" }, "message": "[NETNS]: Consolidate kernel netlink socket destruction.\n\nCreate a specific helper for netlink kernel socket disposal. This just\nlet the code look better and provides a ground for proper disposal\ninside a namespace.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nTested-by: Alexey Dobriyan \u003cadobriyan@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7d460db953d6d205e4c8ecc2017aea1ec22b6c9a", "tree": "583358d5d9d936c06fa346929a5851a28c0be444", "parents": [ "ee63d22b8953fd0dde22f52c0bc17a304ae50403" ], "author": { "name": "Daniel Lezcano", "email": "dlezcano@fr.ibm.com", "time": "Fri Jan 18 23:52:35 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:08:04 2008 -0800" }, "message": "[IPV6]: Fix ip6_frag ctl\n\nAlexey Dobriyan reported an oops when unsharing the network\nindefinitely inside a loop. This is because the ip6_frag is not per\nnamespace while the ctls are.\n\nThat happens at the fragment timer expiration:\ninet_frag_secret_rebuild function is called and this one restarts the\ntimer using the value stored inside the sysctl field.\n\n \"mod_timer(\u0026f-\u003esecret_timer, now + f-\u003ectl-\u003esecret_interval);\"\n\nWhen the network is unshared, ip6_frag.ctl is initialized with the new\nsysctl instances, but ip6_frag has only one instance. A race in this\ncase will appear because f-\u003ectl can be modified during the read access\nin the timer callback.\n\nUntil the ip6_frag is not per namespace, I discard the assignation to\nthe ctl field of ip6_frags in ip6_frag_sysctl_init when the network\nnamespace is not the init net.\n\nSigned-off-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "569d36452ee26c08523cc9f658901c5188640853", "tree": "f296ea41b92f655031f9345d3febd8319e5a06ee", "parents": [ "a6501e080c318f8d4467679d17807f42b3a33cd5" ], "author": { "name": "Daniel Lezcano", "email": "dlezcano@fr.ibm.com", "time": "Fri Jan 18 03:56:57 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:46 2008 -0800" }, "message": "[NETNS][DST] dst: pass the dst_ops as parameter to the gc functions\n\nThe garbage collection function receive the dst_ops structure as\nparameter. This is useful for the next incoming patchset because it\nwill need the dst_ops (there will be several instances) and the\nnetwork namespace pointer (contained in the dst_ops).\n\nThe protocols which do not take care of the namespaces will not be\nimpacted by this change (expect for the function signature), they do\njust ignore the parameter.\n\nSigned-off-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c71e9167081a6a0d2a076cda674b696b89bb31c2", "tree": "d10434bc658ba40a51a76ab6916154d2d8d73331", "parents": [ "c56cc9c07b049acc9d2ca97be0b540978c0c80bf" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Jan 14 23:49:37 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:42 2008 -0800" }, "message": "[NETFILTER]: nf_conntrack: make print_conntrack function optional for l4protos\n\nAllows to remove five empty implementations.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c56cc9c07b049acc9d2ca97be0b540978c0c80bf", "tree": "08ec1d0d7083b8f87db50e746c6ac0c8ac3ad49b", "parents": [ "b334aadc3c5cd4dae2a44f3dac09b3ef718ccde1" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Jan 14 23:49:17 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:41 2008 -0800" }, "message": "[NETFILTER]: nf_conntrack: remove print_conntrack function from l3protos\n\nIts unused and unlikely to ever be used.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "022748a9357c4c1a0113ec1ce5612f383b80156f", "tree": "9c1d64082f93011732c496d356543faa4ca76e01", "parents": [ "f9ef8a23c37677929e95ad4026a2fa0d449c1d3e" ], "author": { "name": "Denys Vlasenko", "email": "vda.linux@googlemail.com", "time": "Mon Jan 14 23:44:05 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:29 2008 -0800" }, "message": "[NETFILTER]: {ip,ip6}_tables: remove some inlines\n\nThis patch removes inlines except those which are used\nby packet matching code and thus are performance-critical.\n\nBefore:\n\n$ size */*/*/ip*tables*.o\n text data bss dec hex filename\n 6402 500 16 6918 1b06 net/ipv4/netfilter/ip_tables.o\n 7130 500 16 7646 1dde net/ipv6/netfilter/ip6_tables.o\n\nAfter:\n\n$ size */*/*/ip*tables*.o\n text data bss dec hex filename\n 6307 500 16 6823 1aa7 net/ipv4/netfilter/ip_tables.o\n 7010 500 16 7526 1d66 net/ipv6/netfilter/ip6_tables.o\n\nSigned-off-by: Denys Vlasenko \u003cvda.linux@googlemail.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2ae15b64e6a1608c840c60df38e8e5eef7b2b8c3", "tree": "2dc98965f239535256ec141dfacefd385d8cd9d6", "parents": [ "917b6fbd6e8dd952c64d1d7468897160467d2cc0" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@computergmbh.de", "time": "Mon Jan 14 23:42:28 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:26 2008 -0800" }, "message": "[NETFILTER]: Update modules\u0027 descriptions\n\nUpdates the MODULE_DESCRIPTION() tags for all Netfilter modules,\nactually describing what the module does and not just\n\"netfilter XYZ target\".\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@computergmbh.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8ce22fcab432313717d393c96ad35f0aee016e83", "tree": "fbc81c52e38a8b9ea7f4b8a7f9be797f429915cd", "parents": [ "b26e76b7ce35b673deafab4a40eb33db6f81036f" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Jan 14 23:31:36 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:16 2008 -0800" }, "message": "[NETFILTER]: Remove some EXPERIMENTAL dependencies\n\nMost of the netfilter modules are not considered experimental anymore,\nthe only ones I want to keep marked as EXPERIMENTAL are:\n\n- TCPOPTSTRIP target, which is brand new.\n\n- SANE helper, which is quite new.\n\n- CLUSTERIP target, which I believe hasn\u0027t had much testing despite\n being in the kernel for quite a long time.\n\n- SCTP match and conntrack protocol, which are a mess and need to\n be reviewed and cleaned up before I would trust them.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a308da1627d711fd0c7542bfe892abc78d65d215", "tree": "58dd91e39eea89a8a635f3d264f012fa2fcb624c", "parents": [ "e5ba31f11f6cae785e893d5d10abd612fef0b6bc" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Mon Jan 14 05:36:50 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:07 2008 -0800" }, "message": "[NETNS][RAW]: Create the /proc/net/raw(6) in each namespace.\n\nTo do so, just register the proper subsystem and create files in\n-\u003einit callbacks.\n\nNo other special per-namespace handling for raw sockets is required.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e5ba31f11f6cae785e893d5d10abd612fef0b6bc", "tree": "9c4f4782fc52569218e6e9b1c8ab5c5820cd53eb", "parents": [ "f51d599fbecf4881a36466f0355da6b0b346ea70" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Mon Jan 14 05:36:27 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:06 2008 -0800" }, "message": "[NETNS][RAW]: Eliminate explicit init_net references.\n\nHappily, in all the rest places (-\u003ebind callbacks only), that require the\nstruct net, we have a socket, so get the net from it.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f51d599fbecf4881a36466f0355da6b0b346ea70", "tree": "46cd843dd44f1b74bb69f1a2b207260e468ae1be", "parents": [ "be185884b31093555dc10aa32efe0b73c835312e" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Mon Jan 14 05:35:57 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:06 2008 -0800" }, "message": "[NETNS][RAW]: Make /proc/net/raw(6) show per-namespace socket list.\n\nPull the struct net pointer up to the showing functions\nto filter the sockets depending on their namespaces.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "be185884b31093555dc10aa32efe0b73c835312e", "tree": "245fe745220352a8757eb8cdff20c9ea59b45314", "parents": [ "8d96544475b236a0f319e492f4828aa8c0801c7f" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Mon Jan 14 05:35:31 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:02:05 2008 -0800" }, "message": "[NETNS][RAW]: Make ipv[46] raw sockets lookup namespaces aware.\n\nThis requires just to pass the appropriate struct net pointer\ninto __raw_v[46]_lookup and skip sockets that do not belong\nto a needed namespace.\n\nThe proper net is get from skb-\u003edev in all the cases.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "50eb431d6e98189eb40606fcd4d03ecd8e168afa", "tree": "fd74d174a0d45c921ad63d66263c9ad5354c3fee", "parents": [ "1486cbd777316e55aa30aeb37e231ce618c29d2e" ], "author": { "name": "Ilpo Järvinen", "email": "ilpo.jarvinen@helsinki.fi", "time": "Sat Jan 12 03:21:00 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:01:49 2008 -0800" }, "message": "[IPV6] route: kill some bloat\n\nnet/ipv6/route.c:\n ip6_pkt_prohibit_out | -130\n ip6_pkt_discard | -261\n ip6_pkt_discard_out | -130\n ip6_pkt_prohibit | -261\n 4 functions changed, 782 bytes removed, diff: -782\n\nnet/ipv6/route.c:\n ip6_pkt_drop | +300\n 1 function changed, 300 bytes added, diff: +300\n\nnet/ipv6/route.o:\n 5 functions changed, 300 bytes added, 782 bytes removed, diff: -482\n\nSigned-off-by: Ilpo Järvinen \u003cilpo.jarvinen@helsinki.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "389f661224cdbdf178553fb09a52dc6c8bf86890", "tree": "710be1af4fd9a1173d9c6eae6da126872f9fd25c", "parents": [ "1cab3da6be6c7659f62d0d297b389cc0e48b2178" ], "author": { "name": "Daniel Lezcano", "email": "dlezcano@fr.ibm.com", "time": "Thu Jan 10 22:44:40 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:01:46 2008 -0800" }, "message": "[NETNS][IPV6]: inet6_addr - make ipv6_chk_home_addr namespace aware\n\nLooks if the address is belonging to the network namespace, otherwise\ndiscard the address for the check.\n\nSigned-off-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nSigned-off-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1cab3da6be6c7659f62d0d297b389cc0e48b2178", "tree": "f5a3e8a21136322625cb61dcf94d3edfac5ab7d1", "parents": [ "06bfe655e7db7719c0eb51eb420fb9c2a6aa1e00" ], "author": { "name": "Daniel Lezcano", "email": "dlezcano@fr.ibm.com", "time": "Thu Jan 10 22:44:09 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jan 28 15:01:45 2008 -0800" }, "message": "[NETNS][IPV6]: inet6_addr - ipv6_get_ifaddr namespace aware\n\nThe inet6_addr_lst is browsed taking into account the network\nnamespace specified as parameter. If an address does not belong\nto the specified namespace, it is ignored.\n\nSigned-off-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nSigned-off-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "06bfe655e7db7719c0eb51eb420fb9c2a6aa1e00" }