)]}' { "log": [ { "commit": "d6b00a5345ce4e86e8b00a88bb84a2c0c1f69ddc", "tree": "11d68bb08584fbbae02a7bf22599bdd67da4408e", "parents": [ "bd414ee605ff3ac5fcd79f57269a897879ee4cde" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 16:34:45 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 16:55:49 2010 +0100" }, "message": "netfilter: xtables: change targets to return error code\n\nPart of the transition of done by this semantic patch:\n// \u003csmpl\u003e\n@ rule1 @\nstruct xt_target ops;\nidentifier check;\n@@\n ops.checkentry \u003d check;\n\n@@\nidentifier rule1.check;\n@@\n check(...) { \u003c...\n-return true;\n+return 0;\n ...\u003e }\n\n@@\nidentifier rule1.check;\n@@\n check(...) { \u003c...\n-return false;\n+return -EINVAL;\n ...\u003e }\n// \u003c/smpl\u003e\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "bd414ee605ff3ac5fcd79f57269a897879ee4cde", "tree": "3cff5d1f3fd43791341e9cde23dabb4dfbc94bd3", "parents": [ "135367b8f6a18507af6b9a6910a14b5699415309" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Tue Mar 23 16:35:56 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 16:55:24 2010 +0100" }, "message": "netfilter: xtables: change matches to return error code\n\nThe following semantic patch does part of the transformation:\n// \u003csmpl\u003e\n@ rule1 @\nstruct xt_match ops;\nidentifier check;\n@@\n ops.checkentry \u003d check;\n\n@@\nidentifier rule1.check;\n@@\n check(...) { \u003c...\n-return true;\n+return 0;\n ...\u003e }\n\n@@\nidentifier rule1.check;\n@@\n check(...) { \u003c...\n-return false;\n+return -EINVAL;\n ...\u003e }\n// \u003c/smpl\u003e\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "135367b8f6a18507af6b9a6910a14b5699415309", "tree": "462e8efb6f4e634421b5c01e96b02280c512eeab", "parents": [ "b0f38452ff73da7e9e0ddc68cd5c6b93c897ca0d" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Mar 19 17:16:42 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 16:04:33 2010 +0100" }, "message": "netfilter: xtables: change xt_target.checkentry return type\n\nRestore function signatures from bool to int so that we can report\nmemory allocation failures or similar using -ENOMEM rather than\nalways having to pass -EINVAL back.\n\n// \u003csmpl\u003e\n@@\ntype bool;\nidentifier check, par;\n@@\n-bool check\n+int check\n (struct xt_tgchk_param *par) { ... }\n// \u003c/smpl\u003e\n\nMinus the change it does to xt_ct_find_proto.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "b0f38452ff73da7e9e0ddc68cd5c6b93c897ca0d", "tree": "fd1bbb75556c88a581fc9dfe9faa045578e468ff", "parents": [ "9f5673174161cc026a6c87f70d9b457e7ad82a80" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Mar 19 17:16:42 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 16:03:13 2010 +0100" }, "message": "netfilter: xtables: change xt_match.checkentry return type\n\nRestore function signatures from bool to int so that we can report\nmemory allocation failures or similar using -ENOMEM rather than\nalways having to pass -EINVAL back.\n\nThis semantic patch may not be too precise (checking for functions\nthat use xt_mtchk_param rather than functions referenced by\nxt_match.checkentry), but reviewed, it produced the intended result.\n\n// \u003csmpl\u003e\n@@\ntype bool;\nidentifier check, par;\n@@\n-bool check\n+int check\n (struct xt_mtchk_param *par) { ... }\n// \u003c/smpl\u003e\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "b2e0b385d77069031edb957839aaaa8441b47287", "tree": "7b0cd8ed74fd0f8ab6a198cd1be735c6a972517e", "parents": [ "9bbc768aa911a3ef336272eaa6d220abfba8ce50" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Tue Mar 23 04:09:07 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 16:00:49 2010 +0100" }, "message": "netfilter: ipv6: use NFPROTO values for NF_HOOK invocation\n\nThe semantic patch that was used:\n// \u003csmpl\u003e\n@@\n@@\n(NF_HOOK\n|NF_HOOK_THRESH\n|nf_hook\n)(\n-PF_INET6,\n+NFPROTO_IPV6,\n ...)\n// \u003c/smpl\u003e\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "fd0ec0e6216baea854465bbdb177f2d1b2ccaf22", "tree": "47a935d96deae38aa0a030039e303b071a7803e0", "parents": [ "d2a7b6bad2c38e41eddb0b24d03627d9e7aa3f7b" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Jul 10 19:27:47 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 15:02:19 2010 +0100" }, "message": "netfilter: xtables: consolidate code into xt_request_find_match\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "d2a7b6bad2c38e41eddb0b24d03627d9e7aa3f7b", "tree": "826eb9d112029819aa44925346a55f887b1c3baf", "parents": [ "ff67e4e42bd178b1179c4d8e5c1fde18758ce84f" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Jul 10 18:55:11 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 15:02:19 2010 +0100" }, "message": "netfilter: xtables: make use of xt_request_find_target\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "ff67e4e42bd178b1179c4d8e5c1fde18758ce84f", "tree": "5d4cc857d4bac40c3d78f90f8e21f12c424737a4", "parents": [ "0d34545563f99886b997be7da63f0e8084af3bc5" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Mar 19 21:08:16 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 25 15:00:04 2010 +0100" }, "message": "netfilter: xt extensions: use pr_\u003clevel\u003e (2)\n\nSupplement to 1159683ef48469de71dc26f0ee1a9c30d131cf89.\n\nDowngrade the log level to INFO for most checkentry messages as they\nare, IMO, just an extra information to the -EINVAL code that is\nreturned as part of a parameter \"constraint violation\". Leave errors\nto real errors, such as being unable to create a LED trigger.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "1159683ef48469de71dc26f0ee1a9c30d131cf89", "tree": "3e9c5aba8d6b8cdfca3f571ad690e6b09e6af881", "parents": [ "8bee4bad03c5b601bd6cea123c31025680587ccc" ], "author": { "name": "Zhitong Wang", "email": "zhitong.wangzt@alibaba-inc.com", "time": "Fri Mar 19 16:01:54 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Mar 19 16:01:54 2010 +0100" }, "message": "netfilter: remove unused headers in net/ipv6/netfilter/ip6t_LOG.c\n\nRemove unused headers in net/ipv6/netfilter/ip6t_LOG.c\n\nSigned-off-by: Zhitong Wang \u003czhitong.wangzt@alibaba-inc.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "be91fd5e323b46450ca82f6828e933e3791fb2f2", "tree": "1a664fb7887e8a0d7f1507780d3533e669e1c3a3", "parents": [ "85bc3f38147c5d3fb1eb9ca2236536389b592cae" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 18 02:22:32 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 18 14:20:07 2010 +0100" }, "message": "netfilter: xtables: replace custom duprintf with pr_debug\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "4f948db1915ff05e4ce0fd98e6323db6a3ec0fc0", "tree": "26960e5aa3ce14de1fbfcff6f0f602c0056f7869", "parents": [ "16599786ae5e9d5f936706d2202d8c7224cd51ed" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 18 11:03:51 2010 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Thu Mar 18 14:20:07 2010 +0100" }, "message": "netfilter: xtables: remove almost-unused xt_match_param.data member\n\nThis member is taking up a \"long\" per match, yet is only used by one\nmodule out of the roughly 90 modules, ip6t_hbh. ip6t_hbh can be\nrestructured a little to accomodate for the lack of the .data member.\nThis variant uses checking the par-\u003ematch address, which should avoid\nhaving to add two extra functions, including calls, i.e.\n\n(hbh_mt6: call hbhdst_mt6(skb, par, NEXTHDR_OPT),\ndst_mt6: call hbhdst_mt6(skb, par, NEXTHDR_DEST))\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "e2577a065832f2c6d108de2e027891bdb2d78924", "tree": "e7d2d4f8c853fad7a896da5d3b7f8b6202d9e8a1", "parents": [ "3f07d1295191cfa41125e4e61ee2064790070071" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Sat Mar 13 12:23:29 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Mar 13 12:23:29 2010 -0800" }, "message": "ipv6: Send netlink notification when DAD fails\n\nIf we are managing IPv6 addresses using DHCP, it would be nice\nfor user-space to be notified if an address configured through\nDHCP fails DAD. Otherwise user-space would have to poll to see\nwhether DAD succeeds.\n\nThis patch uses the existing notification mechanism and simply\nhooks it into the DAD failure code path.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6cce09f87a04797fae5b947ef2626c14a78f0b49", "tree": "a1d7638f9571a29db9bc5c5d8e0baee19597d59e", "parents": [ "4045635318538d3ddd2007720412fdc4b08f6a62" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sun Mar 07 23:21:57 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 08 10:45:27 2010 -0800" }, "message": "tcp: Add SNMP counters for backlog and min_ttl drops\n\nCommit 6b03a53a (tcp: use limited socket backlog) added the possibility\nof dropping frames when backlog queue is full.\n\nCommit d218d111 (tcp: Generalized TTL Security Mechanism) added the\npossibility of dropping frames when TTL is under a given limit.\n\nThis patch adds new SNMP MIB entries, named TCPBacklogDrop and\nTCPMinTTLDrop, published in /proc/net/netstat in TcpExt: line\n\nnetstat -s | egrep \"TCPBacklogDrop|TCPMinTTLDrop\"\n TCPBacklogDrop: 0\n TCPMinTTLDrop: 0\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0c9a2ac1f8a2e55b3382dfc27256878a58ea49e9", "tree": "0084f79428afa47efd40594cc96fd3a6b87cfc24", "parents": [ "25dc27d17dc868aae78fd03bef3113cf586b12e5" ], "author": { "name": "YOSHIFUJI Hideaki / 吉藤英明", "email": "yoshfuji@linux-ipv6.org", "time": "Sun Mar 07 00:14:44 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 07 15:25:53 2010 -0800" }, "message": "ipv6: Optmize translation between IPV6_PREFER_SRC_xxx and RT6_LOOKUP_F_xxx.\n\nIPV6_PREFER_SRC_xxx definitions:\n| #define IPV6_PREFER_SRC_TMP 0x0001\n| #define IPV6_PREFER_SRC_PUBLIC 0x0002\n| #define IPV6_PREFER_SRC_COA 0x0004\n\nRT6_LOOKUP_F_xxx definitions:\n| #define RT6_LOOKUP_F_SRCPREF_TMP 0x00000008\n| #define RT6_LOOKUP_F_SRCPREF_PUBLIC 0x00000010\n| #define RT6_LOOKUP_F_SRCPREF_COA 0x00000020\n\nSo, we can translate between these two groups by shift operation\ninstead of multiple \u0027if\u0027s.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a3a858ff18a72a8d388e31ab0d98f7e944841a62", "tree": "e51a59ce280f0aa818ac5e1d989bc8a137b7cd47", "parents": [ "2499849ee8f513e795b9f2c19a42d6356e4943a4" ], "author": { "name": "Zhu Yi", "email": "yi.zhu@intel.com", "time": "Thu Mar 04 18:01:47 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 05 13:34:03 2010 -0800" }, "message": "net: backlog functions rename\n\nsk_add_backlog -\u003e __sk_add_backlog\nsk_add_backlog_limited -\u003e sk_add_backlog\n\nSigned-off-by: Zhu Yi \u003cyi.zhu@intel.com\u003e\nAcked-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "55349790d7cbf0d381873a7ece1dcafcffd4aaa9", "tree": "2f5cc194b8d7b2fd559c24fe2dfd946535923daa", "parents": [ "6b03a53a5ab7ccf2d5d69f96cf1c739c4d2a8fb9" ], "author": { "name": "Zhu Yi", "email": "yi.zhu@intel.com", "time": "Thu Mar 04 18:01:42 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 05 13:34:00 2010 -0800" }, "message": "udp: use limited socket backlog\n\nMake udp adapt to the limited socket backlog change.\n\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nCc: \"Pekka Savola (ipv6)\" \u003cpekkas@netcore.fi\u003e\nCc: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: Zhu Yi \u003cyi.zhu@intel.com\u003e\nAcked-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6b03a53a5ab7ccf2d5d69f96cf1c739c4d2a8fb9", "tree": "e16e367dd5365c707ecc7373c593da4922d6c8d6", "parents": [ "8eae939f1400326b06d0c9afe53d2a484a326871" ], "author": { "name": "Zhu Yi", "email": "yi.zhu@intel.com", "time": "Thu Mar 04 18:01:41 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 05 13:34:00 2010 -0800" }, "message": "tcp: use limited socket backlog\n\nMake tcp adapt to the limited socket backlog change.\n\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nCc: \"Pekka Savola (ipv6)\" \u003cpekkas@netcore.fi\u003e\nCc: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: Zhu Yi \u003cyi.zhu@intel.com\u003e\nAcked-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8f37ada5b5f6bfb4d251a7f510f249cb855b77b3", "tree": "8f39575febf0319570798117f8738f5127084634", "parents": [ "84e8b803f1e16f3a2b8b80f80a63fa2f2f8a9be6" ], "author": { "name": "stephen hemminger", "email": "shemminger@vyatta.com", "time": "Wed Mar 03 08:19:59 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 04 00:39:34 2010 -0800" }, "message": "IPv6: fix race between cleanup and add/delete address\n\nThis solves a potential race problem during the cleanup process.\nThe issue is that addrconf_ifdown() needs to traverse address list,\nbut then drop lock to call the notifier. The version in -next\ncould get confused if add/delete happened during this window.\nOriginal code (2.6.32 and earlier) was okay because all addresses\nwere always deleted.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "84e8b803f1e16f3a2b8b80f80a63fa2f2f8a9be6", "tree": "f7e5aec42f50c6e4751751cf422c7bf16bff69ce", "parents": [ "5b2a19539c5f59c5a038d213ede723f0245d97cf" ], "author": { "name": "stephen hemminger", "email": "shemminger@vyatta.com", "time": "Tue Mar 02 13:32:46 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 04 00:39:33 2010 -0800" }, "message": "IPv6: addrconf notify when address is unavailable\n\nMy recent change in net-next to retain permanent addresses caused regression.\nDevice refcount would not go to zero when device was unregistered because\nleft over anycast reference would hold ipv6 dev reference which would hold\ndevice references...\n\nThe correct procedure is to call notify chain when address is no longer\navailable for use. When interface comes back DAD timer will notify\nback that address is available.\n\nAlso, link local addresses should be purged when interface is brought\ndown. The address might be changed.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5b2a19539c5f59c5a038d213ede723f0245d97cf", "tree": "254bd6d2a4e574337c821c00a7ba10d024e52439", "parents": [ "122e4519cd5c224d4b8e681d368132b643e28f60" ], "author": { "name": "stephen hemminger", "email": "shemminger@vyatta.com", "time": "Tue Mar 02 13:32:45 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 04 00:39:33 2010 -0800" }, "message": "IPv6: addrconf timer race\n\nThe Router Solicitation timer races with device state changes\nbecause it doesn\u0027t lock the device. Use local variable to avoid\none repeated dereference.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "122e4519cd5c224d4b8e681d368132b643e28f60", "tree": "1fe589902069d711663b027ba0a631971254b22e", "parents": [ "e5c1a0aa00ce94ab0cd669bb290c3ae4657242a3" ], "author": { "name": "stephen hemminger", "email": "shemminger@vyatta.com", "time": "Tue Mar 02 13:32:44 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 04 00:39:32 2010 -0800" }, "message": "IPv6: addrconf dad timer unnecessary bh_disable\n\nTimer code runs in bottom half, so there is no need for\nusing _bh form of locking. Also check if device is not ready\nto avoid race with address that is no longer active.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "87c1e12b5eeb7b30b4b41291bef8e0b41fc3dde9", "tree": "4e30c4d60c21ab5e0346648ed852258a96265288", "parents": [ "3a5b27bf6f29574d667230c7e76e4b83fe3014e0" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Mar 02 02:51:56 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 03 01:04:37 2010 -0800" }, "message": "ipsec: Fix bogus bundle flowi\n\nWhen I merged the bundle creation code, I introduced a bogus\nflowi value in the bundle. Instead of getting from the caller,\nit was instead set to the flow in the route object, which is\ntotally different.\n\nThe end result is that the bundles we created never match, and\nwe instead end up with an ever growing bundle list.\n\nThanks to Jamal for find this problem.\n\nReported-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nAcked-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nAcked-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "38bdbd8efc8a661dedb52264359531b3a1c11716", "tree": "5f2a4ea75c6eb3c0305b45d8c8914cc87bb1db25", "parents": [ "773c3e75d1fc7ea5058bfeab5d82bac5b85f8cd8", "6b4ff2d7675511a31980fa5379808660e1261f90" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 26 09:31:09 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 26 09:31:09 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6\n" }, { "commit": "6b4ff2d7675511a31980fa5379808660e1261f90", "tree": "6952b1b263bb7cb78272312414032d73ef149d9d", "parents": [ "a49c65037146bfb2fe300b8277b10b4479fea5fc" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Feb 26 17:53:31 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Feb 26 17:53:31 2010 +0100" }, "message": "netfilter: xtables: restore indentation\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "14f3ad6f4a12495b32b0dd743bc7179f36658208", "tree": "bff2b347d1a1755955ba1b37c561b1bff2f6d861", "parents": [ "fbf219f1c89b15e90ec2db5a3e9636376dc623db" ], "author": { "name": "Ulrich Weber", "email": "uweber@astaro.com", "time": "Fri Feb 26 04:34:49 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 26 04:34:49 2010 -0800" }, "message": "ipv6: Use 1280 as min MTU for ipv6 forwarding\n\nClients will set their MTU to 1280 if they receive a\nICMPV6_PKT_TOOBIG message with an MTU less than 1280.\n\nTo allow encapsulating of packets over a 1280 link\nwe should always accept packets with a size of 1280\nfor forwarding even if the path has a lower MTU and\nfragment the encapsulated packets afterwards.\n\nIn case a forwarded packet is not going to be encapsulated\na ICMPV6_PKT_TOOBIG msg will still be send by ip6_fragment()\nwith the correct MTU.\n\nSigned-off-by: Ulrich Weber \u003cuweber@astaro.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "45bb00609022ecf1d97e083666c68c74d237b799", "tree": "9d8d632a9c2671ab9487ed1d73b8dc45de48b90b", "parents": [ "1d9cfc4e354cd619d92bb938657dec3c533e6929" ], "author": { "name": "Ulrich Weber", "email": "uweber@astaro.com", "time": "Thu Feb 25 23:28:58 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 26 03:59:07 2010 -0800" }, "message": "ipv6: Remove IPV6_ADDR_RESERVED\n\nRFC 4291 section 2.4 states that all uncategorized addresses\nshould be considered as Global Unicast.\n\nThis will remove IPV6_ADDR_RESERVED completely\nand return IPV6_ADDR_UNICAST in ipv6_addr_type() instead.\n\nSigned-off-by: Ulrich Weber \u003cuweber@astaro.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "04488734806948624dabc4514f96f14cd75b9a50", "tree": "74f3a3c10a7177a5f86398b83ad7bf0569fe8b89", "parents": [ "54831a83bfe656c4c54e287c734c6b0ccaa3719b", "c4d49794ff2838038fd9756eae39c39a5a685833" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 25 23:22:42 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 25 23:22:42 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n" }, { "commit": "54831a83bfe656c4c54e287c734c6b0ccaa3719b", "tree": "abd5bef16d1a6011f629a36d4e245a2ed4f3df3c", "parents": [ "fb977e2ca607a7e74946a1de798f474d1b80b9d6", "0f234214d15fa914436d304ecf5c3e43449e79f9" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Feb 24 18:23:37 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Feb 24 18:23:37 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6\n" }, { "commit": "0f234214d15fa914436d304ecf5c3e43449e79f9", "tree": "e31b2fd40b14530c5b49413070495eabd082eb1f", "parents": [ "6bdb331bc6910d1ccb74dc9852fc858c5916c927" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 24 18:36:04 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 24 18:36:04 2010 +0100" }, "message": "netfilter: xtables: reduce arguments to translate_table\n\nJust pass in the entire repl struct. In case of a new table (e.g.\nip6t_register_table), the repldata has been previously filled with\ntable-\u003ename and table-\u003esize already (in ip6t_alloc_initial_table).\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "6bdb331bc6910d1ccb74dc9852fc858c5916c927", "tree": "d77dd2df2d6d43ce25703ce8c9ecab0173c14a7f", "parents": [ "dcea992aca82cb08b4674c4c783e325835408d1e" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 24 18:35:37 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 24 18:35:37 2010 +0100" }, "message": "netfilter: xtables: optimize call flow around xt_ematch_foreach\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "dcea992aca82cb08b4674c4c783e325835408d1e", "tree": "b3490bbbf49931f1405a7ebeb2f2f9d2b136cd9a", "parents": [ "0559518b5b99c591226460c0bbf8e6a570c518a8" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 24 18:34:48 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 24 18:34:48 2010 +0100" }, "message": "netfilter: xtables: replace XT_MATCH_ITERATE macro\n\nThe macro is replaced by a list.h-like foreach loop. This makes\nthe code more inspectable.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "0559518b5b99c591226460c0bbf8e6a570c518a8", "tree": "da3dd25683636f80c4861150816c1cb1a643348a", "parents": [ "72b2b1dd77e8feb0b7c0b26dee58f2a1e2c9828c" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 24 18:33:43 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 24 18:33:43 2010 +0100" }, "message": "netfilter: xtables: optimize call flow around xt_entry_foreach\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "72b2b1dd77e8feb0b7c0b26dee58f2a1e2c9828c", "tree": "4289fef5441a1664f60a17cb473d657f77cf1112", "parents": [ "8ccb92ad41cb311e52ad1b1fe77992c7f47a3b63" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 24 18:32:59 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 24 18:32:59 2010 +0100" }, "message": "netfilter: xtables: replace XT_ENTRY_ITERATE macro\n\nThe macro is replaced by a list.h-like foreach loop. This makes\nthe code much more inspectable.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "bd55775c8dd656fc69b3a42a1c4ab32abb7e8af9", "tree": "766b30d5fc29d5d4849a10a290db51fe0f7c3ad7", "parents": [ "bf825f81b454fae2ffe1b675f3a549656726440e" ], "author": { "name": "Jamal Hadi Salim", "email": "hadi@cyberus.ca", "time": "Mon Feb 22 16:20:22 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 22 16:20:22 2010 -0800" }, "message": "xfrm: SA lookups signature with mark\n\npass mark to all SA lookups to prepare them for when we add code\nto have them search.\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "88af182e389097997c5e2a0b42285b3522796759", "tree": "b2df5a8589aaee30073665da46523a3908e8870a", "parents": [ "b0483e78e5c4c9871fc5541875b3bc006846d46b" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Fri Feb 19 13:22:59 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 19 15:40:50 2010 -0800" }, "message": "net: Fix sysctl restarts...\n\nYuck. It turns out that when we restart sysctls we were restarting\nwith the values already changed. Which unfortunately meant that\nthe second time through we thought there was no change and skipped\nall kinds of work, despite the fact that there was indeed a change.\n\nI have fixed this the simplest way possible by restoring the changed\nvalues when we restart the sysctl write.\n\nOne of my coworkers spotted this bug when after disabling forwarding\non an interface pings were still forwarded.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9e2dcf72023d1447f09c47d77c99b0c49659e5ce", "tree": "38fdd50b7344f1cc6447a8420df313e74e0ccf7c", "parents": [ "64507fdbc29c3a622180378210ecea8659b14e40" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Feb 19 18:18:37 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Feb 19 18:18:37 2010 +0100" }, "message": "netfilter: nf_conntrack_reasm: properly handle packets fragmented into a single fragment\n\nWhen an ICMPV6_PKT_TOOBIG message is received with a MTU below 1280,\nall further packets include a fragment header.\n\nUnlike regular defragmentation, conntrack also needs to \"reassemble\"\nthose fragments in order to obtain a packet without the fragment\nheader for connection tracking. Currently nf_conntrack_reasm checks\nwhether a fragment has either IP6_MF set or an offset !\u003d 0, which\nmakes it ignore those fragments.\n\nRemove the invalid check and make reassembly handle fragment queues\ncontaining only a single fragment.\n\nReported-and-tested-by: Ulrich Weber \u003cuweber@astaro.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "3ffe533c87281b68d469b279ff3a5056f9c75862", "tree": "456d4c8c877e937fd4919e4c30c75a7bb9f6651f", "parents": [ "bbef49daca35d4fd21bf606a10b6980f17d9df5d" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Thu Feb 18 08:25:24 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 18 14:30:17 2010 -0800" }, "message": "ipv6: drop unused \"dev\" arg of icmpv6_send()\n\nDunno, what was the idea, it wasn\u0027t used for a long time.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bbef49daca35d4fd21bf606a10b6980f17d9df5d", "tree": "44b7df91941c3266286b8046890ddc7c0dfa26ec", "parents": [ "bc417d99bf279f034474bc2d7dedd390838a5480" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Thu Feb 18 08:13:30 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 18 14:30:17 2010 -0800" }, "message": "ipv6: use standard lists for FIB walks\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bc417d99bf279f034474bc2d7dedd390838a5480", "tree": "5b43a0d21bfd3fcbf6cca47972ea4b474ec346e4", "parents": [ "663717f65c075eb4c6da7a123041295bd5295cc0" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Thu Feb 18 08:12:20 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 18 14:30:16 2010 -0800" }, "message": "ipv6: remove stale MIB definitions\n\nICMP6 MIB statistics was per-netns for quite a time.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6457d26bd40077238799e31df2b800bcf4ef9177", "tree": "4d9f085a8f33fa5528c14cbf60678295bbe74d11", "parents": [ "dfa1a041094f4a6e5845a19a1b10e317676722e7" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@vyatta.com", "time": "Wed Feb 17 18:48:44 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Feb 17 18:48:44 2010 -0800" }, "message": "IPv6: convert mc_lock to spinlock\n\nOnly used for writing, so convert to spinlock\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dc4c2c31053ba5bf685d273cd62ecca406dddb2d", "tree": "c74ac486ee668eec2a24d9a4191a855fb0eed8af", "parents": [ "f6ca057f1bfe251d944505fc5ba4df3762802539" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Fri Feb 12 11:41:39 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Feb 17 00:03:27 2010 -0800" }, "message": "net: remove INIT_RCU_HEAD() usage\n\ncall_rcu() will unconditionally reinitialize RCU head anyway.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nAcked-by: Paul E. McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7d720c3e4f0c4fc152a6bf17e24244a3c85412d2", "tree": "36e037187ce79acb211702bea22e99c625787757", "parents": [ "2bb4646fce8d09916b351d1a62f98db7cec6fc41" ], "author": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Tue Feb 16 15:20:26 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 23:05:38 2010 -0800" }, "message": "percpu: add __percpu sparse annotations to net\n\nAdd __percpu sparse annotations to net.\n\nThese annotations are to make sparse consider percpu variables to be\nin a different address space and warn if accessed without going\nthrough percpu accessors. This patch doesn\u0027t affect normal builds.\n\nThe macro and type tricks around snmp stats make things a bit\ninteresting. DEFINE/DECLARE_SNMP_STAT() macros mark the target field\nas __percpu and SNMP_UPD_PO_STATS() macro is updated accordingly. All\nsnmp_mib_*() users which used to cast the argument to (void **) are\nupdated to cast it to (void __percpu **).\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nAcked-by: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Patrick McHardy \u003ckaber@trash.net\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@ghostprotocols.net\u003e\nCc: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nCc: netdev@vger.kernel.org\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2bb4646fce8d09916b351d1a62f98db7cec6fc41", "tree": "c1f0d002e69868606eca9d1b919835f422892063", "parents": [ "6836b9bdd98e3b500cd49512484df68f46e14659", "b0483e78e5c4c9871fc5541875b3bc006846d46b" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 22:09:29 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 22:09:29 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n" }, { "commit": "54716e3beb0ab20c49471348dfe399a71bfc8fd3", "tree": "216e2b70e58032217082da224c397db46c13429c", "parents": [ "02291680ffba92e5b5865bc0c5e7d1f3056b80ec" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Sun Feb 14 03:27:03 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 15:55:18 2010 -0800" }, "message": "net neigh: Decouple per interface neighbour table controls from binary sysctls\n\nStop computing the number of neighbour table settings we have by\ncounting the number of binary sysctls. This behaviour was silly\nand meant that we could not add another neighbour table setting\nwithout also adding another binary sysctl.\n\nDon\u0027t pass the binary sysctl path for neighour table entries\ninto neigh_sysctl_register. These parameters are no longer\nused and so are just dead code.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d5aa407f59f5b83d2c50ec88f5bf56d40f1f8978", "tree": "664c30873708f0e361e5250835238043200f4b50", "parents": [ "c2892f02712e9516d72841d5c019ed6916329794" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Tue Feb 16 09:05:04 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 14:55:25 2010 -0800" }, "message": "tunnels: fix netns vs proto registration ordering\n\nSame stuff as in ip_gre patch: receive hook can be called before netns\nsetup is done, oopsing in net_generic().\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "10e7454ed7a2da39f1f6255f63d7df27ab4bb67f", "tree": "467bf2ee42e91914ac679ad871a87ea2ecb3925f", "parents": [ "1cab819b5e244e1b853c7b440981e6a960da3bfb" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Feb 15 19:24:30 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 14:53:24 2010 -0800" }, "message": "ipcomp: Avoid duplicate calls to ipcomp_destroy\n\nWhen ipcomp_tunnel_attach fails we will call ipcomp_destroy twice.\nThis may lead to double-frees on certain structures.\n\nAs there is no reason to explicitly call ipcomp_destroy, this patch\nremoves it from ipcomp*.c and lets the standard xfrm_state destruction\ntake place.\n\nThis is based on the discovery and patch by Alexey Dobriyan.\n\nTested-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "749f621e20ab0db35a15ff730088922603c809ba", "tree": "2684d12199b58f2b9e0c5b7e6cc0ea3f002e611a", "parents": [ "339c6e99853d2ef1f02ad8a313e079050a300427", "3e5e524ffb5fcf2447eb5dd9f8e54ad22dd9baa7" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 11:15:13 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 16 11:15:13 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6\n" }, { "commit": "9546377c42e12513b33925ab829d893dcf521c5f", "tree": "c025fb134016a1af53b601eacf51b37b89932048", "parents": [ "564517e804c9c6d4e29c270bfc1517404d27107b" ], "author": { "name": "Shan Wei", "email": "shanwei@cn.fujitsu.com", "time": "Thu Feb 11 00:12:45 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 15 21:49:49 2010 -0800" }, "message": "IPv6: Delete redundant counter of IPSTATS_MIB_REASMFAILS\n\nWhen no more memory can be allocated, fq_find() will return NULL and\nincrease the value of IPSTATS_MIB_REASMFAILS. In this case,\nipv6_frag_rcv() also increase the value of IPSTATS_MIB_REASMFAILS.\n\nSo, the patch deletes redundant counter of IPSTATS_MIB_REASMFAILS in fq_find().\nand deletes the unused parameter of idev.\n\nSigned-off-by: Shan Wei \u003cshanwei@cn.fujitsu.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5d0aa2ccd4699a01cfdf14886191c249d7b45a01", "tree": "6ea81b5eede26bd6a04bcc3cd79770c334139381", "parents": [ "8fea97ec1772bbf553d89187340ef624d548e115" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Feb 15 18:13:33 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Feb 15 18:13:33 2010 +0100" }, "message": "netfilter: nf_conntrack: add support for \"conntrack zones\"\n\nNormally, each connection needs a unique identity. Conntrack zones allow\nto specify a numerical zone using the CT target, connections in different\nzones can use the same identity.\n\nExample:\n\niptables -t raw -A PREROUTING -i veth0 -j CT --zone 1\niptables -t raw -A OUTPUT -o veth1 -j CT --zone 1\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "8fea97ec1772bbf553d89187340ef624d548e115", "tree": "c9f3936e346e388629e735538849b2102162478a", "parents": [ "d5d1baa15f5b05e9110403724d5dc72d6d541e04" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Feb 15 17:45:08 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Feb 15 17:45:08 2010 +0100" }, "message": "netfilter: nf_conntrack: pass template to l4proto -\u003eerror() handler\n\nThe error handlers might need the template to get the conntrack zone\nintroduced in the next patches to perform a conntrack lookup.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "d5d1baa15f5b05e9110403724d5dc72d6d541e04", "tree": "bdd4858e8a63c7aae1b65f44320dae2aa519b48e", "parents": [ "739674fb7febf116e7d647031fab16989a08a965" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Jun 26 07:51:59 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Mon Feb 15 16:59:29 2010 +0100" }, "message": "netfilter: xtables: add const qualifiers\n\nThis should make it easier to remove redundant arguments later.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "739674fb7febf116e7d647031fab16989a08a965", "tree": "b2b0bcde6aa93dfc7a9811da7805affcef225a2a", "parents": [ "b402405d71beed8e4df354844353f66b4e18269f" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Fri Jun 26 08:23:19 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Mon Feb 15 16:59:28 2010 +0100" }, "message": "netfilter: xtables: constify args in compat copying functions\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "fa96a0e2e67fe34a3d994e3f354a5c229dd14286", "tree": "723129525104cae2bc5db2ce812b26c9f9d9da94", "parents": [ "98e6d2d5ee26bf56850a10eb64139c68fb09ba19" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Sun Nov 01 00:36:40 2009 +0100" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Mon Feb 15 16:56:51 2010 +0100" }, "message": "netfilter: iptables: remove unused function arguments\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "81d54ec8479a2c695760da81f05b5a9fb2dbe40a", "tree": "4a7da65da1b418e1e18291ddae807fad83dca1f0", "parents": [ "55d955902a7f78e3e7c9ddbc71a4a050d9d44810" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Wed Feb 10 20:26:19 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 12 16:51:10 2010 -0800" }, "message": "udp: remove redundant variable\n\nThe variable \u0027copied\u0027 is used in udp_recvmsg() to emphasize that the passed\n\u0027len\u0027 is adjusted to fit the actual datagram length. But the same can be\ndone by adjusting \u0027len\u0027 directly. This patch thus removes the indirection.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "21809fafa042fcfff3f788419bed99f3c289745c", "tree": "9f9647427cd85e69e9afac0813777a8e8db8399e", "parents": [ "dc2b99f71ef477a31020511876ab4403fb7c4420" ], "author": { "name": "stephen hemminger", "email": "shemminger@vyatta.com", "time": "Mon Feb 08 19:48:52 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 12 12:28:01 2010 -0800" }, "message": "IPv6: remove trivial nested _bh suffix\n\nDon\u0027t need to disable bottom half it is already down in the\nprevious lock. Move some blank lines to group locking in same\ncontext.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dc2b99f71ef477a31020511876ab4403fb7c4420", "tree": "cb30c11a7eb13d2ad004ee168135282aac434791", "parents": [ "c0ad98453f23b98f73a1f1be2a75303a6c0dee4c" ], "author": { "name": "stephen hemminger", "email": "shemminger@vyatta.com", "time": "Mon Feb 08 19:48:05 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 12 12:28:01 2010 -0800" }, "message": "IPv6: keep permanent addresses on admin down\n\nPermanent IPV6 addresses should not be removed when the link is\nset to admin down, only when device is removed.\n\nWhen link is lost permanent addresses should be marked as tentative\nso that when link comes back they are subject to duplicate address\ndetection (if DAD was enabled for that address).\n\nOther routing systems keep manually configured IPv6 addresses\nwhen link is set down.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2bec5a369ee79576a3eea2c23863325089785a2c", "tree": "7a9fd4bce3ece4636b50de6579f95b5bae54264c", "parents": [ "69a6a0b38a139ccceef32222108caca8a9b0b795" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Feb 08 05:19:03 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Feb 12 12:06:35 2010 -0800" }, "message": "ipv6: fib: fix crash when changing large fib while dumping it\n\nWhen the fib size exceeds what can be dumped in a single skb, the\ndump is suspended and resumed once the last skb has been received\nby userspace. When the fib is changed while the dump is suspended,\nthe walker might contain stale pointers, causing a crash when the\ndump is resumed.\n\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000018\nIP: [\u003cffffffffa01bce04\u003e] fib6_walk_continue+0xbb/0x124 [ipv6]\nPGD 5347a067 PUD 65c7067 PMD 0\nOops: 0000 [#1] PREEMPT SMP\n...\nRIP: 0010:[\u003cffffffffa01bce04\u003e]\n[\u003cffffffffa01bce04\u003e] fib6_walk_continue+0xbb/0x124 [ipv6]\n...\nCall Trace:\n [\u003cffffffff8104aca3\u003e] ? mutex_spin_on_owner+0x59/0x71\n [\u003cffffffffa01bd105\u003e] inet6_dump_fib+0x11b/0x1b9 [ipv6]\n [\u003cffffffff81371af4\u003e] netlink_dump+0x5b/0x19e\n [\u003cffffffff8134f288\u003e] ? consume_skb+0x28/0x2a\n [\u003cffffffff81373b69\u003e] netlink_recvmsg+0x1ab/0x2c6\n [\u003cffffffff81372781\u003e] ? netlink_unicast+0xfa/0x151\n [\u003cffffffff813483e0\u003e] __sock_recvmsg+0x6d/0x79\n [\u003cffffffff81348a53\u003e] sock_recvmsg+0xca/0xe3\n [\u003cffffffff81066d4b\u003e] ? autoremove_wake_function+0x0/0x38\n [\u003cffffffff811ed1f8\u003e] ? radix_tree_lookup_slot+0xe/0x10\n [\u003cffffffff810b3ed7\u003e] ? find_get_page+0x90/0xa5\n [\u003cffffffff810b5dc5\u003e] ? filemap_fault+0x201/0x34f\n [\u003cffffffff810ef152\u003e] ? fget_light+0x2f/0xac\n [\u003cffffffff813519e7\u003e] ? verify_iovec+0x4f/0x94\n [\u003cffffffff81349a65\u003e] sys_recvmsg+0x14d/0x223\n\nStore the serial number when beginning to walk the fib and reload\npointers when continuing to walk after a change occured. Similar\nto other dumping functions, this might cause unrelated entries to\nbe missed when entries are deleted.\n\nTested-by: Ben Greear \u003cgreearb@candelatech.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b2907e501945d5d13326a6a7441c13e41cd0e799", "tree": "3560769d57cc6acd24d73ca70d39c0400a483712", "parents": [ "9d288dffe3a276e1f06ba556845c456d696c5a4f" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Thu Feb 11 18:41:35 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Feb 11 18:41:35 2010 +0100" }, "message": "netfilter: xtables: fix mangle tables\n\nIn POST_ROUTING hook, calling dev_net(in) is going to oops.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "e3eaa9910b380530cfd2c0670fcd3f627674da8a", "tree": "309e522e78f78149ec3cb99ffc386d1b72415a96", "parents": [ "2b95efe7f6bb750256a702cc32d33b0cb2cd8223" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Jun 17 22:14:54 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 10 17:50:47 2010 +0100" }, "message": "netfilter: xtables: generate initial table on-demand\n\nThe static initial tables are pretty large, and after the net\nnamespace has been instantiated, they just hang around for nothing.\nThis commit removes them and creates tables on-demand at runtime when\nneeded.\n\nSize shrinks by 7735 bytes (x86_64).\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "2b95efe7f6bb750256a702cc32d33b0cb2cd8223", "tree": "49ab6f0eb13fe524211f94db29c19827529f49a5", "parents": [ "2b21e051472fdb4680076278b2ccf63ebc1cc3bc" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Jun 17 13:57:48 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 10 17:13:33 2010 +0100" }, "message": "netfilter: xtables: use xt_table for hook instantiation\n\nThe respective xt_table structures already have most of the metadata\nneeded for hook setup. Add a \u0027priority\u0027 field to struct xt_table so\nthat xt_hook_link() can be called with a reduced number of arguments.\n\nSo should we be having more tables in the future, it comes at no\nstatic cost (only runtime, as before) - space saved:\n6807373-\u003e6806555.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "2b21e051472fdb4680076278b2ccf63ebc1cc3bc", "tree": "284c85824fcc2de0016451be071f4dd2b377e9cb", "parents": [ "737535c5cf3524e4bfaa91e22edefd52eccabbce" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Sat Jun 13 06:57:10 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 10 17:03:53 2010 +0100" }, "message": "netfilter: xtables: compact table hook functions (2/2)\n\nThe calls to ip6t_do_table only show minimal differences, so it seems\nlike a good cleanup to merge them to a single one too.\nSpace saving obtained by both patches: 6807725-\u003e6807373\n(\"Total\" column from `size -A`.)\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "737535c5cf3524e4bfaa91e22edefd52eccabbce", "tree": "4c6918a8fb0b7568f30310947043320a03d10328", "parents": [ "9ab99d5a43e9f283738fd9fd365539306d13eaac" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Sat Jun 13 06:46:36 2009 +0200" }, "committer": { "name": "Jan Engelhardt", "email": "jengelh@medozas.de", "time": "Wed Feb 10 16:44:58 2010 +0100" }, "message": "netfilter: xtables: compact table hook functions (1/2)\n\nThis patch combines all the per-hook functions in a given table into\na single function. Together with the 2nd patch, further\nsimplifications are possible up to the point of output code reduction.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n" }, { "commit": "9ab99d5a43e9f283738fd9fd365539306d13eaac", "tree": "0214a63e3f4f7f4f187f0139e4a5d8abe453902b", "parents": [ "76780373190d7e8ddfb6fed06aef068e2445c743", "b1109bf085c8dd69537b7876ea83f914dd1fe46a" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 10 14:17:10 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 10 14:17:10 2010 +0100" }, "message": "Merge branch \u0027master\u0027 of /repos/git/net-next-2.6\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "b1109bf085c8dd69537b7876ea83f914dd1fe46a", "tree": "086bd9891a8c92284ea148c93f2242e6c7c02bd2", "parents": [ "889b8f964f2f226b7cd5a0a515109e3d8d9d1613", "44bfce5c3ec91baf8ffcd075c66711740f29a949" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 09 11:44:44 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 09 11:44:44 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n" }, { "commit": "14c7dbe043d01a83a30633ab6b109ba2ac61d9f7", "tree": "0358b6f285036f64c5f5cd6aac4bd2b0768fee8e", "parents": [ "13ccdfc2af03e09e60791f7d4bc4ccf53398af7c" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Mon Feb 08 11:17:43 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 08 11:17:43 2010 -0800" }, "message": "netfilter: xtables: compat out of scope fix\n\nAs per C99 6.2.4(2) when temporary table data goes out of scope,\nthe behaviour is undefined:\n\n\tif (compat) {\n\t\tstruct foo tmp;\n\t\t...\n\t\tprivate \u003d \u0026tmp;\n\t}\n\t[dereference private]\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nCc: stable@kernel.org\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "b2a15a604d379af323645e330638e2cfcc696aff", "tree": "75a863636fae6f5e3fcf3dacbdee3ccf1f8b7c8d", "parents": [ "0cebe4b4163b6373c9d24c1a192939777bc27e55" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 03 14:13:03 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 03 14:40:17 2010 +0100" }, "message": "netfilter: nf_conntrack: support conntrack templates\n\nSupport initializing selected parameters of new conntrack entries from a\n\"conntrack template\", which is a specially marked conntrack entry attached\nto the skb.\n\nCurrently the helper and the event delivery masks can be initialized this\nway.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "add67461240c1dadc7c8d97e66f8f92b556ca523", "tree": "dac0f8982130e407ac184fb55d18140a3ebcef5d", "parents": [ "794e68716bab578ae8f8912dc934496d7c7abc90" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 03 13:45:12 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Feb 03 13:45:12 2010 +0100" }, "message": "netfilter: add struct net * to target parameters\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "d74340d31bf1dbeb00acadddd8697666528a7846", "tree": "a52af136a0022ebb2239803e480fb0758d677597", "parents": [ "a92df2545402c1a08e7a158f4477a52dea0eeeed" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Mon Jan 25 10:39:09 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 28 06:31:06 2010 -0800" }, "message": "netns xfrm: ipcomp6 support\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a1664773907a2b69e2a3019598dcbeffa6bc724b", "tree": "77070892675e29de901587a4f55bbc620b20e211", "parents": [ "e924960dacdf85d118a98c7262edf2f99c3015cf" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Mon Jan 25 10:37:54 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 28 06:31:05 2010 -0800" }, "message": "netns xfrm: xfrm6_tunnel in netns\n\nI\u0027m not sure about rcu stuff near kmem cache destruction:\n* checks for non-empty hashes look bogus, they\u0027re done _before_\n rcu_berrier()\n* unregistering netns ops is done before kmem_cache destoy\n (as it should), and unregistering involves rcu barriers by itself\n\nSo it looks nothing should be done.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e924960dacdf85d118a98c7262edf2f99c3015cf", "tree": "a11378743ad6c653989f686722a3fc829e2a4c66", "parents": [ "ce96bc86bf2ee12e8a3bf461ca8027557c1ef42f" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Mon Jan 25 10:28:21 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 28 06:31:05 2010 -0800" }, "message": "netns xfrm: fixup xfrm6_tunnel error propagation\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "05ba712d7eb156009753e18e5116cabd869cc6e2", "tree": "1ad850d6889f6b3671a5636653940f20a7d22bdf", "parents": [ "257ddbdad13cd3c4f7d03b85af632c508aa8abc9", "b473946a0853860e13b51c28add5524741117786" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 28 06:12:38 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 28 06:12:38 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n" }, { "commit": "c92b544bd5d8e7ed7d81c77bbecab6df2a95aa53", "tree": "9e451dc5abdfbcb10cbbf9232d1646537a7936ff", "parents": [ "39d321577405e8e269fd238b278aaf2425fa788a" ], "author": { "name": "Shan Wei", "email": "shanwei@cn.fujitsu.com", "time": "Tue Jan 26 02:40:38 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jan 26 05:13:27 2010 -0800" }, "message": "ipv6: conntrack: Add member of user to nf_ct_frag6_queue structure\n\nThe commit 0b5ccb2(title:ipv6: reassembly: use seperate reassembly queues for\nconntrack and local delivery) has broken the saddr\u0026\u0026daddr member of\nnf_ct_frag6_queue when creating new queue. And then hash value\ngenerated by nf_hashfn() was not equal with that generated by fq_find().\nSo, a new received fragment can\u0027t be inserted to right queue.\n\nThe patch fixes the bug with adding member of user to nf_ct_frag6_queue structure.\n\nSigned-off-by: Shan Wei \u003cshanwei@cn.fujitsu.com\u003e\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d7c7544c3d5f59033d1bf3236bc7b289f5f26b75", "tree": "1a3c9e7b6c0c9158ddb73faa05b07697c3493cf1", "parents": [ "a40ccc6868943e74ec12f26a266ce1d0373b2b32" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sun Jan 24 22:47:53 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jan 24 22:47:53 2010 -0800" }, "message": "netns xfrm: deal with dst entries in netns\n\nGC is non-existent in netns, so after you hit GC threshold, no new\ndst entries will be created until someone triggers cleanup in init_net.\n\nMake xfrm4_dst_ops and xfrm6_dst_ops per-netns.\nThis is not done in a generic way, because it woule waste\n(AF_MAX - 2) * sizeof(struct dst_ops) bytes per-netns.\n\nReorder GC threshold initialization so it\u0027d be done before registering\nXFRM policies.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5833929cc2ad2b3064b4fac8c44e293972d240d8", "tree": "f40c1e8c54f7b42fb1edf7dadc624ad60deac307", "parents": [ "81c1ebfc4379f529b001e23164dd5c2282bdc0ec" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Fri Jan 22 10:17:26 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jan 23 01:21:27 2010 -0800" }, "message": "net: constify MIB name tables\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "51c24aaacaea90c8e87f1dec75a2ac7622b593f8", "tree": "9f54936c87764bef75e97395cb56b7d1e0df24c6", "parents": [ "4276e47e2d1c85a2477caf0d22b91c4f2377fba8", "6be325719b3e54624397e413efd4b33a997e55a3" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jan 23 00:31:06 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jan 23 00:31:06 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n" }, { "commit": "7c070aa947d1a4105742378579c267f6e7fd08a1", "tree": "51e0b9344d224fbcfed562361559d881c5fa45de", "parents": [ "b38f6eddeee510ce8178c2d2db54ed25f1d7cb63" ], "author": { "name": "Shan Wei", "email": "shanwei@cn.fujitsu.com", "time": "Wed Jan 20 10:42:41 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Jan 20 10:42:41 2010 +0100" }, "message": "IPv6: reassembly: replace magic number with macro definitions\n\nUse macro to define high/low thresh value, refer to IPV6_FRAG_TIMEOUT.\n\nSigned-off-by: Shan Wei \u003cshanwei@cn.fujitsu.com\u003e\nAcked-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "b38f6eddeee510ce8178c2d2db54ed25f1d7cb63", "tree": "91c13185ff8444cb4a3b88fd90890f164b34d11a", "parents": [ "a5d896adf019143adf72d08826fe5359b6a8762c" ], "author": { "name": "Shan Wei", "email": "shanwei@cn.fujitsu.com", "time": "Wed Jan 20 10:39:14 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Wed Jan 20 10:39:14 2010 +0100" }, "message": "netfilter: nf_conntrack_ipv6: delete the redundant macro definitions\n\nThe following three macro definitions are never used, so delete them.\n\nSigned-off-by: Shan Wei \u003cshanwei@cn.fujitsu.com\u003e\nAcked-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "f54e9367f8499a9bf6b2afbc0dce63e1d53c525a", "tree": "a2e852b0fc05c0e1397136bca29c359163bc2445", "parents": [ "a83d8e8d099fc373a5ca7112ad08c553bb2c180f" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Mon Jan 18 08:25:47 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Jan 18 08:25:47 2010 +0100" }, "message": "netfilter: xtables: add struct xt_mtdtor_param::net\n\nAdd -\u003enet to match destructor list like -\u003enet in constructor list.\n\nMake sure it\u0027s set in ebtables/iptables/ip6tables, this requires to\npropagate netns up to *_unregister_table().\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "a83d8e8d099fc373a5ca7112ad08c553bb2c180f", "tree": "19b7bbeb34ae718f5bac20d1ab42d6280bb20665", "parents": [ "a1004d8e3d463012f231bab104325ecb15637f78" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Mon Jan 18 08:21:13 2010 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Jan 18 08:21:13 2010 +0100" }, "message": "netfilter: xtables: add struct xt_mtchk_param::net\n\nSome complex match modules (like xt_hashlimit/xt_recent) want netns\ninformation at constructor and destructor time. We propably can play\ngames at match destruction time, because netns can be passed in object,\nbut I think it\u0027s cleaner to explicitly pass netns.\n\nAdd -\u003enet, make sure it\u0027s set from ebtables/iptables/ip6tables code.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "2c8c1e7297e19bdef3c178c3ea41d898a7716e3e", "tree": "4d336562e8d5379732a0646e17b0bb1750111ef6", "parents": [ "72659ecce68588b74f6c46862c2b4cec137d7a5a" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sun Jan 17 03:35:32 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jan 17 19:16:02 2010 -0800" }, "message": "net: spread __net_init, __net_exit\n\n__net_init/__net_exit are apparently not going away, so use them\nto full extent.\n\nIn some cases __net_init was removed, because it was called from\n__net_exit code.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "72659ecce68588b74f6c46862c2b4cec137d7a5a", "tree": "791c5900e2a2b219774904cef7fab90fa462b81c", "parents": [ "0ec00f0392b807d57a2281576a96552d7694b6bb" ], "author": { "name": "Octavian Purdila", "email": "opurdila@ixiacom.com", "time": "Sun Jan 17 19:09:39 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jan 17 19:09:39 2010 -0800" }, "message": "tcp: account SYN-ACK timeouts \u0026 retransmissions\n\nCurrently we don\u0027t increment SYN-ACK timeouts \u0026 retransmissions\nalthough we do increment the same stats for SYN. We seem to have lost\nthe SYN-ACK accounting with the introduction of tcp_syn_recv_timer\n(commit 2248761e in the netdev-vger-cvs tree).\n\nThis patch fixes this issue. In the process we also rename the v4/v6\nsyn/ack retransmit functions for clarity. We also add a new\nrequest_socket operations (syn_ack_timeout) so we can keep code in\ninet_connection_sock.c protocol agnostic.\n\nSigned-off-by: Octavian Purdila \u003copurdila@ixiacom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2570a4f5428bcdb1077622342181755741e7fa60", "tree": "b96fe3146042d5ada1172ec6fad6b661368313d2", "parents": [ "ba5b0bfa06b6fbee03c6889046e9adcefa5d2c20" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Jan 13 17:27:37 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Jan 13 17:27:37 2010 -0800" }, "message": "ipv6: skb_dst() can be NULL in ipv6_hop_jumbo().\n\nThis fixes CERT-FI FICORA #341748\n\nDiscovered by Olli Jarva and Tuomo Untinen from the CROSS\nproject at Codenomicon Ltd.\n\nJust like in CVE-2007-4567, we can\u0027t rely upon skb_dst() being\nnon-NULL at this point. We fixed that in commit\ne76b2b2567b83448c2ee85a896433b96150c92e6 (\"[IPV6]: Do no rely on\nskb-\u003edst before it is assigned.\")\n\nHowever commit 483a47d2fe794328d29950fe00ce26dd405d9437 (\"ipv6: added\nnet argument to IP6_INC_STATS_BH\") put a new version of the same bug\ninto this function.\n\nComplicating analysis further, this bug can only trigger when network\nnamespaces are enabled in the build. When namespaces are turned off,\nthe dev_net() does not evaluate it\u0027s argument, so the dereference\nwould not occur.\n\nSo, for a long time, namespaces couldn\u0027t be turned on unless SYSFS was\ndisabled. Therefore, this code has largely been disabled except by\npeople turning it on explicitly for namespace development.\n\nWith help from Eugene Teo \u003ceugene@redhat.com\u003e\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d4a66e752d0b19934dd208884f8605fe385aaaa9", "tree": "72fb727be1d7636aae9cddfe9aa93ac9dec75daf", "parents": [ "bdbec4b86ee99b020e159f9bd604003a3ae3b0ab", "fa15e99b6bb44aa86b241a43ca8c509e91f80153" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jan 10 22:55:03 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jan 10 22:55:03 2010 -0800" }, "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\nConflicts:\n\tdrivers/net/benet/be_cmds.h\n\tinclude/linux/sysctl.h\n" }, { "commit": "c3f6c21d6e60e39c81c27f18ebad9c7615eff545", "tree": "dd727510c7263325fabafd6f75893d65b6af71df", "parents": [ "51f5300682f5925a11edfddfd47ed47376871974" ], "author": { "name": "Jiri Slaby", "email": "jslaby@suse.cz", "time": "Sun Jan 10 00:43:03 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jan 10 13:27:57 2010 -0800" }, "message": "NET: ipv6, remove unnecessary check\n\nStanse found a potential null dereference in snmp6_unregister_dev.\nThere is a check for idev being NULL, but it is dereferenced\nearlier. But idev cannot be NULL when passed to\nsnmp6_unregister_dev, so remove the test.\n\nSigned-off-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nCc: \"Pekka Savola (ipv6)\" \u003cpekkas@netcore.fi\u003e\nCc: James Morris \u003cjmorris@namei.org\u003e\nCc: Hideaki YOSHIFUJI \u003cyoshfuji@linux-ipv6.org\u003e\nCc: Patrick McHardy \u003ckaber@trash.net\u003e\nCc: netdev@vger.kernel.org\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5856b606e69d3e4dc2d718b475e216eb30ee2006", "tree": "3d5d299fed1827e82190aa03d4f5095446764560", "parents": [ "df2f7ec8c09ce879245c3309d859218188123ef1" ], "author": { "name": "Joe Perches", "email": "joe@perches.com", "time": "Fri Jan 08 00:59:52 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jan 08 00:59:52 2010 -0800" }, "message": "net/ipv6/tcp_ipv6.c: Use compressed IPv6 address\n\nUse \"[compressed ipv6]:port\" form suggested by:\nhttp://tools.ietf.org/id/draft-ietf-6man-text-addr-representation-03.txt\n\nSigned-off-by: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7ad6848c7e81a603605fad3f3575841aab004eea", "tree": "c95cc3473a2c47d6dedbbe5bc1a298546fc4127f", "parents": [ "58933c643f86651decc4818cf680f9ec3b0460d2" ], "author": { "name": "Octavian Purdila", "email": "opurdila@ixiacom.com", "time": "Wed Jan 06 20:37:01 2010 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Jan 06 20:37:01 2010 -0800" }, "message": "ip: fix mc_loop checks for tunnels with multicast outer addresses\n\nWhen we have L3 tunnels with different inner/outer families\n(i.e. IPV4/IPV6) which use a multicast address as the outer tunnel\ndestination address, multicast packets will be loopbacked back to the\nsending socket even if IP*_MULTICAST_LOOP is set to disabled.\n\nThe mc_loop flag is present in the family specific part of the socket\n(e.g. the IPv4 or IPv4 specific part). setsockopt sets the inner\nfamily mc_loop flag. When the packet is pushed through the L3 tunnel\nit will eventually be processed by the outer family which if different\nwill check the flag in a different part of the socket then it was set.\n\nSigned-off-by: Octavian Purdila \u003copurdila@ixiacom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "31d12926e37291970dd4f6e9940df3897766a81d", "tree": "7f20713b70fc2c9e03aa1f7fcf71ffa651c464fc", "parents": [ "068a2de57ddf4f472e32e7af868613c574ad1d88" ], "author": { "name": "laurent chavey", "email": "chavey@google.com", "time": "Tue Dec 15 11:15:28 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Dec 23 14:13:30 2009 -0800" }, "message": "net: Add rtnetlink init_rcvwnd to set the TCP initial receive window\n\nAdd rtnetlink init_rcvwnd to set the TCP initial receive window size\nadvertised by passive and active TCP connections.\nThe current Linux TCP implementation limits the advertised TCP initial\nreceive window to the one prescribed by slow start. For short lived\nTCP connections used for transaction type of traffic (i.e. http\nrequests), bounding the advertised TCP initial receive window results\nin increased latency to complete the transaction.\nSupport for setting initial congestion window is already supported\nusing rtnetlink init_cwnd, but the feature is useless without the\nability to set a larger TCP initial receive window.\nThe rtnetlink init_rcvwnd allows increasing the TCP initial receive\nwindow, allowing TCP connection to advertise larger TCP receive window\nthan the ones bounded by slow start.\n\nSigned-off-by: Laurent Chavey \u003cchavey@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3705e11a21bcdffe7422ee7870e1b23fe4ac70f4", "tree": "80212be3720cb7cab44c1c4b809dc7d4a133aecb", "parents": [ "f9c4171e01f6befdf5d15346070b819d341c9c73" ], "author": { "name": "Yang Hongyang", "email": "yanghy@cn.fujitsu.com", "time": "Fri Dec 18 20:25:13 2009 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 18 20:25:13 2009 -0800" }, "message": "ipv6: fix an oops when force unload ipv6 module\n\nWhen I do an ipv6 module force unload,I got the following oops:\n#rmmod -f ipv6\n------------[ cut here ]------------\nkernel BUG at mm/slub.c:2969!\ninvalid opcode: 0000 [#1] SMP\nlast sysfs file: /sys/devices/pci0000:00/0000:00:11.0/0000:02:03.0/net/eth2/ifindex\nModules linked in: ipv6(-) dm_multipath uinput ppdev tpm_tis tpm tpm_bios pcspkr pcnet32 mii parport_pc i2c_piix4 parport i2c_core floppy mptspi mptscsih mptbase scsi_transport_spi\n\nPid: 2530, comm: rmmod Tainted: G R 2.6.32 #2 440BX Desktop Reference Platform/VMware Virtual Platform\nEIP: 0060:[\u003cc04b73f2\u003e] EFLAGS: 00010246 CPU: 0\nEIP is at kfree+0x6a/0xdd\nEAX: 00000000 EBX: c09e86bc ECX: c043e4dd EDX: c14293e0\nESI: e141f1d8 EDI: e140fc31 EBP: dec58ef0 ESP: dec58ed0\n DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068\nProcess rmmod (pid: 2530, ti\u003ddec58000 task\u003ddecb1940 task.ti\u003ddec58000)\nStack:\n c14293e0 00000282 df624240 c0897d08 c09e86bc c09e86bc e141f1d8 dec58f1c\n\u003c0\u003e dec58f00 e140fc31 c09e84c4 e141f1bc dec58f14 c0689d21 dec58f1c e141f1bc\n\u003c0\u003e 00000000 dec58f2c c0689eff c09e84d8 c09e84d8 e141f1bc bff33a90 dec58f38\nCall Trace:\n [\u003ce140fc31\u003e] ? ipv6_frags_exit_net+0x22/0x32 [ipv6]\n [\u003cc0689d21\u003e] ? ops_exit_list+0x19/0x3d\n [\u003cc0689eff\u003e] ? unregister_pernet_operations+0x2a/0x51\n [\u003cc0689f70\u003e] ? unregister_pernet_subsys+0x17/0x24\n [\u003ce140fbfe\u003e] ? ipv6_frag_exit+0x21/0x32 [ipv6]\n [\u003ce141a361\u003e] ? inet6_exit+0x47/0x122 [ipv6]\n [\u003cc045f5de\u003e] ? sys_delete_module+0x198/0x1f6\n [\u003cc04a8acf\u003e] ? remove_vma+0x57/0x5d\n [\u003cc070f63f\u003e] ? do_page_fault+0x2e7/0x315\n [\u003cc0403218\u003e] ? sysenter_do_call+0x12/0x28\nCode: 86 00 00 00 40 c1 e8 0c c1 e0 05 01 d0 89 45 e0 66 83 38 00 79 06 8b 40 0c 89 45 e0 8b 55 e0 8b 02 84 c0 78 14 66 a9 00 c0 75 04 \u003c0f\u003e 0b eb fe 8b 45 e0 e8 35 15 fe ff eb 5d 8b 45 04 8b 55 e0 89\nEIP: [\u003cc04b73f2\u003e] kfree+0x6a/0xdd SS:ESP 0068:dec58ed0\n---[ end trace 4475d1a5b0afa7e5 ]---\n\nIt\u0027s because in ip6_frags_ns_sysctl_register,\n\"table\" only alloced when \"net\" is not equals\nto \"init_net\".So when we free \"table\" in \nip6_frags_ns_sysctl_unregister,we should check\nthis first.\n\nThis patch fix the problem.\n\nSigned-off-by: Yang Hongyang \u003cyanghy@cn.fujitsu.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9c69fabe789b0eb468a0c7031ae7bb850760aea8", "tree": "037e504110bfc23d6fadecb41dc21645e8c58333", "parents": [ "652fd781a52ad6e24b908cd8b83d12699754f253" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Fri Dec 18 20:11:03 2009 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 18 20:11:03 2009 -0800" }, "message": "netns: fix net.ipv6.route.gc_min_interval_ms in netns\n\nsysctl table was copied, all right, but -\u003edata for net.ipv6.route.gc_min_interval_ms\nwas not reinitialized for \"!\u003d \u0026init_net\" case.\n\nIn init_net everthing works by accident due to correct -\u003edata initialization\nin source table.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "81e839efc22361e3fa7ee36f99fd57c57d0d1871", "tree": "eac3550c8773ff0e6ccb91c280b930efc50b0e42", "parents": [ "bb5b7c11263dbbe78253cd05945a6bf8f55add8e", "258c889362aa95d0ab534b38ce8c15d3009705b1" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 15 21:08:53 2009 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 15 21:08:53 2009 -0800" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-2.6\n" }, { "commit": "bb5b7c11263dbbe78253cd05945a6bf8f55add8e", "tree": "7a639cbd6d6ad968ca22427f2b8697aadb37a907", "parents": [ "166a0fd4c788ec7f10ca8194ec6d526afa12db75" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 15 20:56:42 2009 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 15 20:56:42 2009 -0800" }, "message": "tcp: Revert per-route SACK/DSACK/TIMESTAMP changes.\n\nIt creates a regression, triggering badness for SYN_RECV\nsockets, for example:\n\n[19148.022102] Badness at net/ipv4/inet_connection_sock.c:293\n[19148.022570] NIP: c02a0914 LR: c02a0904 CTR: 00000000\n[19148.023035] REGS: eeecbd30 TRAP: 0700 Not tainted (2.6.32)\n[19148.023496] MSR: 00029032 \u003cEE,ME,CE,IR,DR\u003e CR: 24002442 XER: 00000000\n[19148.024012] TASK \u003d eee9a820[1756] \u0027privoxy\u0027 THREAD: eeeca000\n\nThis is likely caused by the change in the \u0027estab\u0027 parameter\npassed to tcp_parse_options() when invoked by the functions\nin net/ipv4/tcp_minisocks.c\n\nBut even if that is fixed, the -\u003econn_request() changes made in\nthis patch series is fundamentally wrong. They try to use the\nlistening socket\u0027s \u0027dst\u0027 to probe the route settings. The\nlistening socket doesn\u0027t even have a route, and you can\u0027t\nget the right route (the child request one) until much later\nafter we setup all of the state, and it must be done by hand.\n\nThis stuff really isn\u0027t ready, so the best thing to do is a\nfull revert. This reverts the following commits:\n\nf55017a93f1a74d50244b1254b9a2bd7ac9bbf7d\n022c3f7d82f0f1c68018696f2f027b87b9bb45c2\n1aba721eba1d84a2defce45b950272cee1e6c72a\ncda42ebd67ee5fdf09d7057b5a4584d36fe8a335\n345cda2fd695534be5a4494f1b59da9daed33663\ndc343475ed062e13fc260acccaab91d7d80fd5b2\n05eaade2782fb0c90d3034fd7a7d5a16266182bb\n6a2a2d6bf8581216e08be15fcb563cfd6c430e1e\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8fa9ff6849bb86c59cc2ea9faadf3cb2d5223497", "tree": "42c1cc382a9cfbb2907ab1471418404f874d53f2", "parents": [ "0b5ccb2ee250136dd7385b1c7da28417d0d4d32d" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Dec 15 16:59:59 2009 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Dec 15 16:59:59 2009 +0100" }, "message": "netfilter: fix crashes in bridge netfilter caused by fragment jumps\n\nWhen fragments from bridge netfilter are passed to IPv4 or IPv6 conntrack\nand a reassembly queue with the same fragment key already exists from\nreassembling a similar packet received on a different device (f.i. with\nmulticasted fragments), the reassembled packet might continue on a different\ncodepath than where the head fragment originated. This can cause crashes\nin bridge netfilter when a fragment received on a non-bridge device (and\nthus with skb-\u003enf_bridge \u003d\u003d NULL) continues through the bridge netfilter\ncode.\n\nAdd a new reassembly identifier for packets originating from bridge\nnetfilter and use it to put those packets in insolated queues.\n\nFixes http://bugzilla.kernel.org/show_bug.cgi?id\u003d14805\n\nReported-and-Tested-by: Chong Qiao \u003cqiaochong@loongson.cn\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "0b5ccb2ee250136dd7385b1c7da28417d0d4d32d", "tree": "b0630141672471d5c800867cd8dbee425308bc73", "parents": [ "9abfe315de96aa5c9878b2f627542bc54901c6e9" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Dec 15 16:59:18 2009 +0100" }, "committer": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Dec 15 16:59:18 2009 +0100" }, "message": "ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery\n\nCurrently the same reassembly queue might be used for packets reassembled\nby conntrack in different positions in the stack (PREROUTING/LOCAL_OUT),\nas well as local delivery. This can cause \"packet jumps\" when the fragment\ncompleting a reassembled packet is queued from a different position in the\nstack than the previous ones.\n\nAdd a \"user\" identifier to the reassembly queue key to seperate the queues\nof each caller, similar to what we do for IPv4.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n" }, { "commit": "9327f7053e3993c125944fdb137a0618319ef2a0", "tree": "3cee7de049a2468bef930b1832c42bd1b2e69e9a", "parents": [ "74757d49016a8b06ca028196886641d7aeb78de5" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Fri Dec 04 03:46:54 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 08 20:17:51 2009 -0800" }, "message": "tcp: Fix a connect() race with timewait sockets\n\nFirst patch changes __inet_hash_nolisten() and __inet6_hash()\nto get a timewait parameter to be able to unhash it from ehash\nat same time the new socket is inserted in hash.\n\nThis makes sure timewait socket wont be found by a concurrent\nwriter in __inet_check_established()\n\nReported-by: kapil dakhane \u003ckdakhane@gmail.com\u003e\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d7fc02c7bae7b1cf69269992cf880a43a350cdaa", "tree": "a43d56fa72913a1cc98a0bbebe054d08581b3a7c", "parents": [ "ee1262dbc65ce0b6234a915d8432171e8d77f518", "28b4d5cc17c20786848cdc07b7ea237a309776bb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 08 07:55:01 2009 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 08 07:55:01 2009 -0800" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6: (1815 commits)\n mac80211: fix reorder buffer release\n iwmc3200wifi: Enable wimax core through module parameter\n iwmc3200wifi: Add wifi-wimax coexistence mode as a module parameter\n iwmc3200wifi: Coex table command does not expect a response\n iwmc3200wifi: Update wiwi priority table\n iwlwifi: driver version track kernel version\n iwlwifi: indicate uCode type when fail dump error/event log\n iwl3945: remove duplicated event logging code\n b43: fix two warnings\n ipw2100: fix rebooting hang with driver loaded\n cfg80211: indent regulatory messages with spaces\n iwmc3200wifi: fix NULL pointer dereference in pmkid update\n mac80211: Fix TX status reporting for injected data frames\n ath9k: enable 2GHz band only if the device supports it\n airo: Fix integer overflow warning\n rt2x00: Fix padding bug on L2PAD devices.\n WE: Fix set events not propagated\n b43legacy: avoid PPC fault during resume\n b43: avoid PPC fault during resume\n tcp: fix a timewait refcnt race\n ...\n\nFix up conflicts due to sysctl cleanups (dead sysctl_check code and\nCTL_UNNUMBERED removed) in\n\tkernel/sysctl_check.c\n\tnet/ipv4/sysctl_net_ipv4.c\n\tnet/ipv6/addrconf.c\n\tnet/sctp/sysctl.c\n" }, { "commit": "13475a30b66cdb9250a34052c19ac98847373030", "tree": "5f28f671092c2948726fdde92e20c3371cfceb77", "parents": [ "ff33a6e2ab97f4cde484cdf1a41778af6d6b7cff" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Wed Dec 02 22:31:19 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Dec 03 16:17:43 2009 -0800" }, "message": "tcp: connect() race with timewait reuse\n\nIts currently possible that several threads issuing a connect() find\nthe same timewait socket and try to reuse it, leading to list\ncorruptions.\n\nCondition for bug is that these threads bound their socket on same\naddress/port of to-be-find timewait socket, and connected to same\ntarget. (SO_REUSEADDR needed)\n\nTo fix this problem, we could unhash timewait socket while holding\nehash lock, to make sure lookups/changes will be serialized. Only\nfirst thread finds the timewait socket, other ones find the\nestablished socket and return an EADDRNOTAVAIL error.\n\nThis second version takes into account Evgeniy\u0027s review and makes sure\ninet_twsk_put() is called outside of locked sections.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "424eff975192553a9ea8bfd51bf65039ffb356ef", "tree": "5fa7b15715b3ce904f7250c50d09bc921d9f28bf", "parents": [ "55dbabee63462a455d8fb57caf08b69db256b012", "3666ed1c4837fd6906da0224c5373d7a2186a193" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Dec 03 13:23:12 2009 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Dec 03 13:23:12 2009 -0800" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6\n" }, { "commit": "b099ce2602d806deb41caaa578731848995cdb2a", "tree": "7541d0d59c73e6b6274d420b8a3ec35d85ca5f2d", "parents": [ "575f4cd5a5b639457747434dbe18d175fa767db4" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Thu Dec 03 02:29:09 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Dec 03 12:23:47 2009 -0800" }, "message": "net: Batch inet_twsk_purge\n\nThis function walks the whole hashtable so there is no point in\npassing it a network namespace. Instead I purge all timewait\nsockets from dead network namespaces that I find. If the namespace\nis one of the once I am trying to purge I am guaranteed no new timewait\nsockets can be formed so this will get them all. If the namespace\nis one I am not acting for it might form a few more but I will\ncall inet_twsk_purge again and shortly to get rid of them. In\nany even if the network namespace is dead timewait sockets are\nuseless.\n\nMove the calls of inet_twsk_purge into batch_exit routines so\nthat if I am killing a bunch of namespaces at once I will just\ncall inet_twsk_purge once and save a lot of redundant unnecessary\nwork.\n\nMy simple 4k network namespace exit test the cleanup time dropped from\nroughly 8.2s to 1.6s. While the time spent running inet_twsk_purge fell\nto about 2ms. 1ms for ipv4 and 1ms for ipv6.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e9c5158ac26affd5d8ce006521bdfb7148090e18", "tree": "a8d43fb446a1908175923f4109c977dcb84e4f91", "parents": [ "3a765edadb28cc736d185f67d1ba6bedcc85f4b9" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Thu Dec 03 12:22:55 2009 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Dec 03 12:22:55 2009 -0800" }, "message": "net: Allow fib_rule_unregister to batch\n\nRefactor the code so fib_rules_register always takes a template instead\nof the actual fib_rules_ops structure that will be used. This is\nrequired for network namespace support so 2 out of the 3 callers already\ndo this, it allows the error handling to be made common, and it allows\nfib_rules_unregister to free the template for hte caller.\n\nModify fib_rules_unregister to use call_rcu instead of syncrhonize_rcu\nto allw multiple namespaces to be cleaned up in the same rcu grace\nperiod.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5adef1809147a9c39119ffd5a13a1ca4fe23a411", "tree": "82c3e969fbe2cb5b227db38dcb7ad18f30b5ae96", "parents": [ "1b038a5e60c7812f19818e8a5df96d029e49c38f" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Dec 03 01:25:57 2009 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Dec 03 12:14:37 2009 -0800" }, "message": "net 04/05: fib_rules: allow to delete local rule\n\ncommit d124356ce314fff22a047ea334379d5105b2d834\nAuthor: Patrick McHardy \u003ckaber@trash.net\u003e\nDate: Thu Dec 3 12:16:35 2009 +0100\n\n net: fib_rules: allow to delete local rule\n\n Allow to delete the local rule and recreate it with a higher priority. This\n can be used to force packets with a local destination out on the wire instead\n of routing them to loopback. Additionally this patch allows to recreate rules\n with a priority of 0.\n\n Combined with the previous patch to allow oif classification, a socket can\n be bound to the desired interface and packets routed to the wire like this:\n\n # move local rule to lower priority\n ip rule add pref 1000 lookup local\n ip rule del pref 0\n\n # route packets of sockets bound to eth0 to the wire independant\n # of the destination address\n ip rule add pref 100 oif eth0 lookup 100\n ip route add default dev eth0 table 100\n\n Signed-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "4957faade11b3a278c3b3cade3411ddc20afa791" }