)]}' { "log": [ { "commit": "4953f0fcc06a125f87874743d968c0e185c8b296", "tree": "f35705517e8f907e5c777c55d5a41c80d3f0e959", "parents": [ "73aaf9355b71d295fd72dc0b93fcdd275c56648f" ], "author": { "name": "Brian Haley", "email": "brian.haley@hp.com", "time": "Thu Oct 11 14:39:29 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 11 14:39:29 2007 -0700" }, "message": "[IPv6]: Update setsockopt(IPV6_MULTICAST_IF) to support RFC 3493, try2\n\n From RFC 3493, Section 5.2:\n\n IPV6_MULTICAST_IF\n\n Set the interface to use for outgoing multicast packets. The\n argument is the index of the interface to use. If the\n interface index is specified as zero, the system selects the\n interface (for example, by looking up the address in a routing\n table and using the resulting interface).\n\nThis patch adds support for (index \u003d\u003d 0) to reset the value to it\u0027s \noriginal state, allowing the system to choose the best interface. IPv4 \nalready behaves this way.\n\nSigned-off-by: Brian Haley \u003cbrian.haley@hp.com\u003e\nAcked-by: David L Stevens \u003cdlstevens@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "31910575a9de61e78065e93846e8e7a4894a18bf", "tree": "5dcc41957a62b8ec06575ebfe47c75828caf8bfb", "parents": [ "092e9d93b3728d484a4e73df9852dc4002cf9923" ], "author": { "name": "Pierre Ynard", "email": "linkfanel@yahoo.fr", "time": "Wed Oct 10 21:22:05 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 10 21:22:05 2007 -0700" }, "message": "[IPv6]: Export userland ND options through netlink (RDNSS support)\n\nAs discussed before, this patch provides userland with a way to access\nrelevant options in Router Advertisements, after they are processed\nand validated by the kernel. Extra options are processed in a generic\nway; this patch only exports RDNSS options described in RFC5006, but\nsupport to control which options are exported could be easily added.\n\nA new rtnetlink message type is defined, to transport Neighbor\nDiscovery options, along with optional context information. At the\nmoment only the address of the router sending an RDNSS option is\nincluded, but additional attributes may be later defined, if needed by\nnew use cases.\n\nSigned-off-by: Pierre Ynard \u003clinkfanel@yahoo.fr\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cd40b7d3983c708aabe3d3008ec64ffce56d33b0", "tree": "0d6fe9cfd2f03fdeee126e317d4bfb145afc458d", "parents": [ "aed815601f3f95281ab3a01f7e2cbe1bd54285a0" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Wed Oct 10 21:15:29 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 10 21:15:29 2007 -0700" }, "message": "[NET]: make netlink user -\u003e kernel interface synchronious\n\nThis patch make processing netlink user -\u003e kernel messages synchronious.\nThis change was inspired by the talk with Alexey Kuznetsov about current\nnetlink messages processing. He says that he was badly wrong when introduced \nasynchronious user -\u003e kernel communication.\n\nThe call netlink_unicast is the only path to send message to the kernel\nnetlink socket. But, unfortunately, it is also used to send data to the\nuser.\n\nBefore this change the user message has been attached to the socket queue\nand sk-\u003esk_data_ready was called. The process has been blocked until all\npending messages were processed. The bad thing is that this processing\nmay occur in the arbitrary process context.\n\nThis patch changes nlk-\u003edata_ready callback to get 1 skb and force packet\nprocessing right in the netlink_unicast.\n\nKernel -\u003e user path in netlink_unicast remains untouched.\n\nEINTR processing for in netlink_run_queue was changed. It forces rtnl_lock\ndrop, but the process remains in the cycle until the message will be fully\nprocessed. So, there is no need to use this kludges now.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nAcked-by: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "227b60f5102cda4e4ab792b526a59c8cb20cd9f8", "tree": "2c9e372601ba794894833b0618bc531a9f5d57c4", "parents": [ "06393009000779b00a558fd2f280882cc7dc2008" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@linux-foundation.org", "time": "Wed Oct 10 17:30:46 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 10 17:30:46 2007 -0700" }, "message": "[INET]: local port range robustness\n\nExpansion of original idea from Denis V. Lunev \u003cden@openvz.org\u003e\n\nAdd robustness and locking to the local_port_range sysctl.\n1. Enforce that low \u003c high when setting.\n2. Use seqlock to ensure atomic update.\n\nThe locking might seem like overkill, but there are\ncases where sysadmin might want to change value in the\nmiddle of a DoS attack.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ceb1eec8291175686d0208e66595ff83bc0624e2", "tree": "83a7fdc7d292f1dbb80f32563d9573810bfe6e42", "parents": [ "87bdc48d304191313203df9b98d783e1ab5a55ab" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 10 15:45:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:56 2007 -0700" }, "message": "[IPSEC]: Move IP length/checksum setting out of transforms\n\nThis patch moves the setting of the IP length and checksum fields out of\nthe transforms and into the xfrmX_output functions. This would help future\nefforts in merging the transforms themselves.\n\nIt also adds an optimisation to ipcomp due to the fact that the transport\noffset is guaranteed to be zero.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "87bdc48d304191313203df9b98d783e1ab5a55ab", "tree": "32f7bfb3a5fa7fe373f11e0ddadd95b6bcd9bd4f", "parents": [ "37fedd3aab6517daec628764c5d66dd8761fbe5f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 10 15:45:25 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:55 2007 -0700" }, "message": "[IPSEC]: Get rid of ipv6_{auth,esp,comp}_hdr\n\nThis patch removes the duplicate ipv6_{auth,esp,comp}_hdr structures since\nthey\u0027re identical to the IPv4 versions. Duplicating them would only create\nproblems for ourselves later when we need to add things like extended\nsequence numbers.\n\nI\u0027ve also added transport header type conversion headers for these types\nwhich are now used by the transforms.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "37fedd3aab6517daec628764c5d66dd8761fbe5f", "tree": "12227aec3944168bff04173dccd580240f4496aa", "parents": [ "7b277b1a5fb147cb828e5d8b9780cee60f31a9bf" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 10 15:44:44 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:54 2007 -0700" }, "message": "[IPSEC]: Use IPv6 calling convention as the convention for x-\u003emode-\u003eoutput\n\nThe IPv6 calling convention for x-\u003emode-\u003eoutput is more general and could\nhelp an eventual protocol-generic x-\u003etype-\u003eoutput implementation. This\npatch adopts it for IPv4 as well and modifies the IPv4 type output functions\naccordingly.\n\nIt also rewrites the IPv6 mac/transport header calculation to be based off\nthe network header where practical.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7b277b1a5fb147cb828e5d8b9780cee60f31a9bf", "tree": "21af4818d7ba9d646a281517f476d81d4245cc30", "parents": [ "bee0b40c0621396326d1c17b81833f59118a2d80" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 10 15:44:06 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:54 2007 -0700" }, "message": "[IPSEC]: Set skb-\u003edata to payload in x-\u003emode-\u003eoutput\n\nThis patch changes the calling convention so that on entry from\nx-\u003emode-\u003eoutput and before entry into x-\u003etype-\u003eoutput skb-\u003edata\nwill point to the payload instead of the IP header.\n\nThis is essentially a redistribution of skb_push/skb_pull calls\nwith the aim of minimising them on the common path of tunnel +\nESP.\n\nIt\u0027ll also let us use the same calling convention between IPv4\nand IPv6 with the next patch.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bee0b40c0621396326d1c17b81833f59118a2d80", "tree": "94a79cef5ba189cda8e6cad2acd720da34c0463c", "parents": [ "8bd170750400bfa5e14c3dd2e2d0f305e1ab0e57" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Oct 10 15:42:23 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:53 2007 -0700" }, "message": "[IPSEC] beet: Fix extension header support on output\n\nThe beet output function completely kills any extension headers by replacing\nthem with the IPv6 header. This is because it essentially ignores the\nresult of ip6_find_1stfragopt by simply acting as if there aren\u0027t any\nextension headers.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f24e3d658cf382f11a7aa7887fa99147bdc6fe0b", "tree": "605da52f1261eaa847adc8d2d048085692355ace", "parents": [ "9b7726523523472ead660b1d45df29dcaf6cc5c0" ], "author": { "name": "Mitsuru Chinen", "email": "mitch@linux.vnet.ibm.com", "time": "Wed Oct 10 02:53:43 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:52 2007 -0700" }, "message": "[IPV6]: Defer IPv6 device initialization until a valid qdisc is specified\n\nTo judge the timing for DAD, netif_carrier_ok() is used. However,\nthere is a possibility that dev-\u003eqdisc stays noop_qdisc even if\nnetif_carrier_ok() returns true. In that case, DAD NS is not sent out.\nWe need to defer the IPv6 device initialization until a valid qdisc\nis specified.\n\nSigned-off-by: Mitsuru Chinen \u003cmitch@linux.vnet.ibm.com\u003e\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cf7732e4cc14b56d593ff53352673e1fd5e3ba52", "tree": "3479e278b72f9d535a58066bc2a26238806252ce", "parents": [ "39699037a5c94d7cd1363dfe48a50c78c643fd9a" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@openvz.org", "time": "Wed Oct 10 02:29:29 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:33 2007 -0700" }, "message": "[NET]: Make core networking code use seq_open_private\n\nThis concerns the ipv4 and ipv6 code mostly, but also the netlink\nand unix sockets.\n\nThe netlink code is an example of how to use the __seq_open_private()\ncall - it saves the net namespace on this private.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b7c6538cd84f8072fad43bfce530f5bf695edbba", "tree": "e0ba79ffe7b79355985a45de9961b17a0462764f", "parents": [ "050f009e16f908932070313c1745d09dc69fd62b" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Oct 09 13:33:35 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:03 2007 -0700" }, "message": "[IPSEC]: Move state lock into x-\u003etype-\u003eoutput\n\nThis patch releases the lock on the state before calling x-\u003etype-\u003eoutput.\nIt also adds the lock to the spots where they\u0027re currently needed.\n\nMost of those places (all except mip6) are expected to disappear with\nasync crypto.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "007f0211a8872f32381f5d44becf8eb2f27f3c30", "tree": "9f6879726b6f016379368ebbde6ce3ec13faaa39", "parents": [ "1ecafede835321ebdc396531245adc37d22366f7" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Oct 09 13:25:59 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:55:00 2007 -0700" }, "message": "[IPSEC]: Store IPv6 nh pointer in mac_header on output\n\nCurrent the x-\u003emode-\u003eoutput functions store the IPv6 nh pointer in the\nskb network header. This is inconvenient because the network header then\nhas to be fixed up before the packet can leave the IPsec stack. The mac\nheader field is unused on output so we can use that to store this instead.\n\nThis patch does that and removes the network header fix-up in xfrm_output.\n\nIt also uses ipv6_hdr where appropriate in the x-\u003etype-\u003eoutput functions.\n\nThere is also a minor clean-up in esp4 to make it use the same code as\nesp6 to help any subsequent effort to merge the two.\n\nLastly it kills two redundant skb_set_* statements in BEET that were\nsimply copied over from transport mode.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0a8891a0a419d43ea06c8ded0849f0820c6a873b", "tree": "c27533cfcb08840470ae082bc981a03d2fa57c22", "parents": [ "4665079cbb2a3e17de82f2ab2940b9f97f37d65e" ], "author": { "name": "Benjamin Thery", "email": "benjamin.thery@bull.net", "time": "Mon Oct 08 20:39:36 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:58 2007 -0700" }, "message": "[IPv6]: use container_of() macro in fib6_clean_node()\n\nIn ip6_fib.c, fib6_clean_node() casts a fib6_walker_t pointer to\na fib6_cleaner_t pointer assuming a struct fib6_walker_t (field \u0027w\u0027)\nis the first field in struct fib6_walker_t.\n\nTo prevent any future problems that may occur if one day a field\nis inadvertently inserted before the \u0027w\u0027 field in struct fib6_cleaner_t,\n(and to improve readability), this patch uses the container_of() macro.\n\nSigned-off-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "45b17f48eaf5e5ff4202454985557b3240141caa", "tree": "00b0b9dc375899b5d1f8ee11f78ef5dcc9b1c2e1", "parents": [ "cdf7e668d4327a33e11be04c4cb9bcc604eaaa0f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:27:19 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:56 2007 -0700" }, "message": "[IPSEC]: Move RO-specific output code into xfrm6_mode_ro.c\n\nThe lastused update check in xfrm_output can be done just as well in\nthe mode output function which is specific to RO.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "436a0a402203d5a47d2edf7e4dde6c08a7257983", "tree": "b47e73326a2ff7dbf8ac3fbcb6c4acea5c06619d", "parents": [ "83815dea47cf3e98ccbb6aecda08cba1ba91208f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:25:53 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:54 2007 -0700" }, "message": "[IPSEC]: Move output replay code into xfrm_output\n\nThe replay counter is one of only two remaining things in the output code\nthat requires a lock on the xfrm state (the other being the crypto). This\npatch moves it into the generic xfrm_output so we can remove the lock from\nthe transforms themselves.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "406ef77c893ebd882209be4e393d64b01fe72054", "tree": "815d753889769b355fba7e648abef7ad1422559e", "parents": [ "bc31d3b2c7d7f2a03721a05cb3c9a3ce8b1e2e5a" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:16:30 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:53 2007 -0700" }, "message": "[IPSEC]: Move common output code to xfrm_output\n\nMost of the code in xfrm4_output_one and xfrm6_output_one are identical so\nthis patch moves them into a common xfrm_output function which will live\nin net/xfrm.\n\nIn fact this would seem to fix a bug as on IPv4 we never reset the network\nheader after a transform which may upset netfilter later on.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bc31d3b2c7d7f2a03721a05cb3c9a3ce8b1e2e5a", "tree": "4e72919c351590c8276534e797eae8260d20f28c", "parents": [ "4b7137ff8fb49d7bf22dfa248baa0d02ace2c43d" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:14:34 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:53 2007 -0700" }, "message": "[IPSEC] ah: Remove keys from ah_data structure\n\nThe keys are only used during initialisation so we don\u0027t need to carry them\nin esp_data. Since we don\u0027t have to allocate them again, there is no need\nto place a limit on the authentication key length anymore.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4b7137ff8fb49d7bf22dfa248baa0d02ace2c43d", "tree": "6a9571d7d5a3d43ec9cd8c661900fe78f89db6b6", "parents": [ "f0703c80e5156406ad947cb67fe277725b48080f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Oct 08 17:13:44 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:52 2007 -0700" }, "message": "[IPSEC] esp: Remove keys from esp_data structure\n\nThe keys are only used during initialisation so we don\u0027t need to carry them\nin esp_data. Since we don\u0027t have to allocate them again, there is no need\nto place a limit on the authentication key length anymore.\n\nThis patch also kills the unused auth.icv member.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cfcabdcc2d5a810208e5bb3974121b7ed60119aa", "tree": "1aed711eeecc5a303b57f1fc47e1b5746e8a72c2", "parents": [ "de83c058af25aa97ed4864abab11e90e8dead6e2" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@linux-foundation.org", "time": "Tue Oct 09 01:59:42 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:54:48 2007 -0700" }, "message": "[NET]: sparse warning fixes\n\nFix a bunch of sparse warnings. Mostly about 0 used as\nNULL pointer, and shadowed variable declarations.\nOne notable case was that hash size should have been unsigned.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f73e924cdd166360e8cc9a1b193008fdc9b3e3e2", "tree": "48fbf4b0f9101359e05fb53eabe194495f8214d1", "parents": [ "5bf758539388fa9383afd539d052ae93229544b9" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Sep 28 14:39:55 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:53:35 2007 -0700" }, "message": "[NETFILTER]: ctnetlink: use netlink policy\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fdf708322d4658daa6eb795d1a835b97efdb335e", "tree": "101258e5e2316c139106d7d69726b8370c1bc1a2", "parents": [ "df6fb868d6118686805c2fa566e213a8f31c8e4f" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Sep 28 14:37:41 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:53:32 2007 -0700" }, "message": "[NETFILTER]: nfnetlink: rename functions containing \u0027nfattr\u0027\n\nThere is no struct nfattr anymore, rename functions to \u0027nlattr\u0027.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "df6fb868d6118686805c2fa566e213a8f31c8e4f", "tree": "3a0d7d7e9c7d2d8c2d7a06b32e02702eecbfddf6", "parents": [ "7c8d4cb4198d199e65a6ced8c81f71e3ac3f4cfc" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Sep 28 14:37:03 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:53:31 2007 -0700" }, "message": "[NETFILTER]: nfnetlink: convert to generic netlink attribute functions\n\nGet rid of the duplicated rtnetlink macros and use the generic netlink\nattribute functions. The old duplicated stuff is moved to a new header\nfile that exists just for userspace.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3b04ddde02cf1b6f14f2697da5c20eca5715017f", "tree": "9da1341a5a399a507b5ea6bf5a3047506b8d8f8f", "parents": [ "b95cce3576813ac3f86bafa6b5daaaaf7574b0fe" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@linux-foundation.org", "time": "Tue Oct 09 01:40:57 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:52:52 2007 -0700" }, "message": "[NET]: Move hardware header operations out of netdevice.\n\nSince hardware header operations are part of the protocol class\nnot the device instance, make them into a separate object and\nsave memory.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b95cce3576813ac3f86bafa6b5daaaaf7574b0fe", "tree": "54da3f245ee145722623a8e0eaab5fc49ea78511", "parents": [ "0c4e85813d0a94eeb8bf813397a4907bdd7bb610" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@linux-foundation.org", "time": "Wed Sep 26 22:13:38 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:52:51 2007 -0700" }, "message": "[NET]: Wrap hard_header_parse\n\nWrap the hard_header_parse function to simplify next step of\nheader_ops conversion.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0c4e85813d0a94eeb8bf813397a4907bdd7bb610", "tree": "53ee948abc930bb1c5cd270c490f87fda5eb45b3", "parents": [ "4c94f8c0c9a82fad84bc5df453aff755cfed70b7" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@linux-foundation.org", "time": "Tue Oct 09 01:36:32 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:52:50 2007 -0700" }, "message": "[NET]: Wrap netdevice hardware header creation.\n\nAdd inline for common usage of hardware header creation, and\nfix bug in IPV6 mcast where the assumption about negative return is\nan errno. Negative return from hard_header means not enough space\nwas available,(ie -N bytes).\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2774c7aba6c97a2535be3309a2209770953780b3", "tree": "9327c795707f6d723c6395c31e1c060e70b5e0db", "parents": [ "0cc217e16cb8ca8ef2544363571fce94259900e0" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Wed Sep 26 22:10:56 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:52:49 2007 -0700" }, "message": "[NET]: Make the loopback device per network namespace.\n\nThis patch makes loopback_dev per network namespace. Adding\ncode to create a different loopback device for each network\nnamespace and adding the code to free a loopback device\nwhen a network namespace exits.\n\nThis patch modifies all users the loopback_dev so they\naccess it as init_net.loopback_dev, keeping all of the\ncode compiling and working. A later pass will be needed to\nupdate the users to use something other than the initial network\nnamespace.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "de3cb747ffac5f2a4a6bb156e7e2fd5229e688e5", "tree": "fe79764b8093843934c9b9f82f573e7a92cef406", "parents": [ "556829657397b9b05baec6691ead4e22ee8d1567" ], "author": { "name": "Daniel Lezcano", "email": "dlezcano@fr.ibm.com", "time": "Tue Sep 25 19:16:28 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:52:14 2007 -0700" }, "message": "[NET]: Dynamically allocate the loopback device, part 1.\n\nThis patch replaces all occurences to the static variable\nloopback_dev to a pointer loopback_dev. That provides the\nmindless, trivial, uninteressting change part for the dynamic\nallocation for the loopback.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: Daniel Lezcano \u003cdlezcano@fr.ibm.com\u003e\nAcked-By: Kirill Korotaev \u003cdev@sw.ru\u003e\nAcked-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "14878f75abd5bf1d38becb405801cd491ee215dc", "tree": "872d70add65e1e58ccbbcc4534c7e826bd3fa9ed", "parents": [ "8b14a536701b50559a0d69d5d593323f550db4e9" ], "author": { "name": "David L Stevens", "email": "dlstevens@us.ibm.com", "time": "Sun Sep 16 16:52:35 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:51:27 2007 -0700" }, "message": "[IPV6]: Add ICMPMsgStats MIB (RFC 4293) [rev 2]\n\nBackground: RFC 4293 deprecates existing individual, named ICMP\ntype counters to be replaced with the ICMPMsgStatsTable. This table\nincludes entries for both IPv4 and IPv6, and requires counting of all\nICMP types, whether or not the machine implements the type.\n\nThese patches \"remove\" (but not really) the existing counters, and\nreplace them with the ICMPMsgStats tables for v4 and v6.\nIt includes the named counters in the /proc places they were, but gets the\nvalues for them from the new tables. It also counts packets generated\nfrom raw socket output (e.g., OutEchoes, MLD queries, RA\u0027s from\nradvd, etc).\n\nChanges:\n1) create icmpmsg_statistics mib\n2) create icmpv6msg_statistics mib\n3) modify existing counters to use these\n4) modify /proc/net/snmp to add \"IcmpMsg\" with all ICMP types\n listed by number for easy SNMP parsing\n5) modify /proc/net/snmp printing for \"Icmp\" to get the named data\n from new counters.\n[new to 2nd revision]\n6) support per-interface ICMP stats\n7) use common macro for per-device stat macros\n\nSigned-off-by: David L Stevens \u003cdlstevens@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "76c72d4f44ec5fb7f88eda8a0d3aa30922c891d1", "tree": "0c773487ff11d098a70fddbc631f153260614bdb", "parents": [ "056925ab3145713e5e83cf8e05ae6fb2f4ace41e" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Sun Sep 16 15:44:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:51:22 2007 -0700" }, "message": "[IPV4/IPV6/DECNET]: Small cleanup for fib rules.\n\nThis patch slightly cleanups FIB rules framework. rules_list as a pointer\non struct fib_rules_ops is useless. It is always assigned with a static\nper/subsystem list in IPv4, IPv6 and DecNet.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nAcked-by: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0b69d4bd263c75b3e2ec94f1c72f338b84be817e", "tree": "7a7d4d3a18ac51307e75150008d596281d35a3d6", "parents": [ "63d804eade298208037045ab6728c933f2b6c27d" ], "author": { "name": "Milan Kocian", "email": "milon@wq.cz", "time": "Sat Sep 15 21:48:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:51:18 2007 -0700" }, "message": "[IPV6]: Remove redundant RTM_DELLINK message.\n\nRemove useless message. We get the right message from another\nsubsystem.\n\nSigned-off-by: Milan Kocian \u003cmilon@wq.cz\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "10d024c1b2fd58af8362670d7d6e5ae52fc33353", "tree": "dbfb03c539986e2c1270385eb0083aaf0dfca8ab", "parents": [ "596c5c97431eab8465739c169401ea611127b9ad" ], "author": { "name": "Ralf Baechle", "email": "ralf@linux-mips.org", "time": "Mon Sep 17 13:11:17 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:51:13 2007 -0700" }, "message": "[NET]: Nuke SET_MODULE_OWNER macro.\n\nIt\u0027s been a useless no-op for long enough in 2.6 so I figured it\u0027s time to\nremove it. The number of people that could object because they\u0027re\nmaintaining unified 2.4 and 2.6 drivers is probably rather small.\n\n[ Handled drivers added by netdev tree and some missed IRDA cases... -DaveM ]\n\nSigned-off-by: Ralf Baechle \u003cralf@linux-mips.org\u003e\nSigned-off-by: Jeff Garzik \u003cjeff@garzik.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8f4c1f9b049df3be11090f1c2c4738700302acae", "tree": "51271d32096e4419173072d120176b4428e52a11", "parents": [ "9d5010db7ecfd6ec00119d3b185c4c0cd3265167" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Wed Sep 12 14:44:36 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:16 2007 -0700" }, "message": "[NETLINK]: Introduce nested and byteorder flag to netlink attribute\n\nThis change allows the generic attribute interface to be used within\nthe netfilter subsystem where this flag was initially introduced.\n\nThe byte-order flag is yet unused, it\u0027s intended use is to\nallow automatic byte order convertions for all atomic types.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "881d966b48b035ab3f3aeaae0f3d3f9b584f45b2", "tree": "c579d59a4107cbbe9e2b85939bc0d496b815c887", "parents": [ "b4b510290b056b86611757ce1175a230f1080f53" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Sep 17 11:56:21 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:10 2007 -0700" }, "message": "[NET]: Make the device list and device lookups per namespace.\n\nThis patch makes most of the generic device layer network\nnamespace safe. This patch makes dev_base_head a\nnetwork namespace variable, and then it picks up\na few associated variables. The functions:\ndev_getbyhwaddr\ndev_getfirsthwbytype\ndev_get_by_flags\ndev_get_by_name\n__dev_get_by_name\ndev_get_by_index\n__dev_get_by_index\ndev_ioctl\ndev_ethtool\ndev_load\nwireless_process_ioctl\n\nwere modified to take a network namespace argument, and\ndeal with it.\n\nvlan_ioctl_set and brioctl_set were modified so their\nhooks will receive a network namespace argument.\n\nSo basically anthing in the core of the network stack that was\naffected to by the change of dev_base was modified to handle\nmultiple network namespaces. The rest of the network stack was\nsimply modified to explicitly use \u0026init_net the initial network\nnamespace. This can be fixed when those components of the network\nstack are modified to handle multiple network namespaces.\n\nFor now the ifindex generator is left global.\n\nFundametally ifindex numbers are per namespace, or else\nwe will have corner case problems with migration when\nwe get that far.\n\nAt the same time there are assumptions in the network stack\nthat the ifindex of a network device won\u0027t change. Making\nthe ifindex number global seems a good compromise until\nthe network stack can cope with ifindex changes when\nyou change namespaces, and the like.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b4b510290b056b86611757ce1175a230f1080f53", "tree": "7bd1d45855ac7457be6d50338c60751f19e436d9", "parents": [ "e9dc86534051b78e41e5b746cccc291b57a3a311" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Wed Sep 12 13:05:38 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:09 2007 -0700" }, "message": "[NET]: Support multiple network namespaces with netlink\n\nEach netlink socket will live in exactly one network namespace,\nthis includes the controlling kernel sockets.\n\nThis patch updates all of the existing netlink protocols\nto only support the initial network namespace. Request\nby clients in other namespaces will get -ECONREFUSED.\nAs they would if the kernel did not have the support for\nthat netlink protocol compiled in.\n\nAs each netlink protocol is updated to be multiple network\nnamespace safe it can register multiple kernel sockets\nto acquire a presence in the rest of the network namespaces.\n\nThe implementation in af_netlink is a simple filter implementation\nat hash table insertion and hash table look up time.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e9dc86534051b78e41e5b746cccc291b57a3a311", "tree": "1cd4a1dde4c51b6311749428a22cc8a8f5436825", "parents": [ "e730c15519d09ea528b4d2f1103681fa5937c0e6" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Wed Sep 12 13:02:17 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:09 2007 -0700" }, "message": "[NET]: Make device event notification network namespace safe\n\nEvery user of the network device notifiers is either a protocol\nstack or a pseudo device. If a protocol stack that does not have\nsupport for multiple network namespaces receives an event for a\ndevice that is not in the initial network namespace it quite possibly\ncan get confused and do the wrong thing.\n\nTo avoid problems until all of the protocol stacks are converted\nthis patch modifies all netdev event handlers to ignore events on\ndevices that are not in the initial network namespace.\n\nAs the rest of the code is made network namespace aware these\nchecks can be removed.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e730c15519d09ea528b4d2f1103681fa5937c0e6", "tree": "c117294523f4d004fb1d740610b6403e5744cdfc", "parents": [ "6d34b1c27a72d5d1c73c567b2f6b1fde316e0eae" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Sep 17 11:53:39 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:08 2007 -0700" }, "message": "[NET]: Make packet reception network namespace safe\n\nThis patch modifies every packet receive function\nregistered with dev_add_pack() to drop packets if they\nare not from the initial network namespace.\n\nThis should ensure that the various network stacks do\nnot receive packets in a anything but the initial network\nnamespace until the code has been converted and is ready\nfor them.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1b8d7ae42d02e483ad94035cca851e4f7fbecb40", "tree": "81f8cc0ee49ef99cc67dfed3dc7b7ecb510abf8b", "parents": [ "457c4cbc5a3dde259d2a1f15d5f9785290397267" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Oct 08 23:24:22 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:07 2007 -0700" }, "message": "[NET]: Make socket creation namespace safe.\n\nThis patch passes in the namespace a new socket should be created in\nand has the socket code do the appropriate reference counting. By\nvirtue of this all socket create methods are touched. In addition\nthe socket create methods are modified so that they will fail if\nyou attempt to create a socket in a non-default network namespace.\n\nFailing if we attempt to create a socket outside of the default\nnetwork namespace ensures that as we incrementally make the network stack\nnetwork namespace aware we will not export functionality that someone\nhas not audited and made certain is network namespace safe.\nAllowing us to partially enable network namespaces before all of the\nexotic protocols are supported.\n\nAny protocol layers I have missed will fail to compile because I now\npass an extra parameter into the socket creation code.\n\n[ Integrated AF_IUCV build fixes from Andrew Morton... -DaveM ]\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "457c4cbc5a3dde259d2a1f15d5f9785290397267", "tree": "a2ceee88780cbce27433b9a4434b3e9251efd81a", "parents": [ "07feaebfcc10cd35e745c7073667935246494bee" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Wed Sep 12 12:01:34 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:49:06 2007 -0700" }, "message": "[NET]: Make /proc/net per network namespace\n\nThis patch makes /proc/net per network namespace. It modifies the global\nvariables proc_net and proc_net_stat to be per network namespace.\nThe proc_net file helpers are modified to take a network namespace argument,\nand all of their callers are fixed to pass \u0026init_net for that argument.\nThis ensures that all of the /proc/net files are only visible and\nusable in the initial network namespace until the code behind them\nhas been updated to be handle multiple network namespaces.\n\nMaking /proc/net per namespace is necessary as at least some files\nin /proc/net depend upon the set of network devices which is per\nnetwork namespace, and even more files in /proc/net have contents\nthat are relevant to a single network namespace.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1dfcae776548f464bee793d06484be275ba8efe7", "tree": "5bb669990a2d93dd9e1cb42d5ee50e9d43e1736d", "parents": [ "c9ee23dfac61a713de48b20999dcacb7ef3c5ed0" ], "author": { "name": "Micah Gruber", "email": "micah.gruber@gmail.com", "time": "Wed Sep 05 07:56:50 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:48:58 2007 -0700" }, "message": "[IPV6]: Remove unneeded pointer iph from ipcomp6_input() in net/ipv6/ipcomp6.c\n\nThis trivial patch removes the unneeded pointer iph, which is never used.\n\nSigned-off-by: Micah Gruber \u003cmicah.gruber@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1e5dc146173251e7baad9a1f7586d5a009b6d9f9", "tree": "ed816741827aac7239e24187df09657ff6f0d21d", "parents": [ "a47ed4cd8cb0709723392f5b841e9015f765d0a6" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Fri Aug 24 19:08:55 2007 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:48:33 2007 -0700" }, "message": "[IPV6] IPSEC: Omit redirect for tunnelled packet.\n\nIPv6 IPsec tunnel gateway incorrectly sends redirect to\nrouter or sender when network device the IPsec tunnelled packet\nis arrived is the same as the one the decapsulated packet\nis sent.\n\nWith this patch, it omits to send the redirect when the forwarding\nskbuff carries secpath, since such skbuff should be assumed as\na decapsulated packet from IPsec tunnel by own.\n\nIt may be a rare case for an IPsec security gateway, however\nit is not rare when the gateway is MIPv6 Home Agent since\nthe another tunnel end-point is Mobile Node and it changes\nthe attached network.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a47ed4cd8cb0709723392f5b841e9015f765d0a6", "tree": "6b79a4b94602bbc0e27df9a6a869253438833f74", "parents": [ "e773e4faa19c54c2f32ddd16add2919588488bd9" ], "author": { "name": "Noriaki TAKAMIYA", "email": "takamiya@po.ntts.co.jp", "time": "Thu Sep 06 03:31:25 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:48:32 2007 -0700" }, "message": "[IPV6] XFRM: Fix connected socket to use transformation.\n\nWhen XFRM policy and state are ready after TCP connection is started,\nthe traffic should be transformed immediately, however it does not\non IPv6 TCP.\n\nIt depends on a dst cache replacement policy with connected socket.\nIt seems that the replacement is always done for IPv4, however, on\nIPv6 case it is done only when routing cookie is changed.\n\nThis patch fix that non-transformation dst can be changed to\ntransformation one.\nThis behavior is required by MIPv6 and improves IPv6 IPsec.\n\nFixes by Masahide NAKAMURA.\n\nSigned-off-by: Noriaki TAKAMIYA \u003ctakamiya@po.ntts.co.jp\u003e\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e773e4faa19c54c2f32ddd16add2919588488bd9", "tree": "316395a9c687155362913ec1c588c0217233f67e", "parents": [ "6f4fc423b96c8fdf6f5c8b8ad79b75b7fb5a5c59" ], "author": { "name": "Brian Haley", "email": "brian.haley@hp.com", "time": "Fri Aug 24 23:16:08 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Oct 10 16:48:32 2007 -0700" }, "message": "[IPV6]: Add v4mapped address inline\n\nAdd v4mapped address inline to avoid calls to ipv6_addr_type().\n\nSigned-off-by: Brian Haley \u003cbrian.haley@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bf0b48dfc368c07c42b5a3a5658c8ee81b4283ac", "tree": "7174e3ce995d6deaefb76027bc1a6265ccd25d11", "parents": [ "bf1b803b01b00c3801e0aa373ba0305f8278e260" ], "author": { "name": "Brian Haley", "email": "brian.haley@hp.com", "time": "Mon Oct 08 00:12:05 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 08 00:12:05 2007 -0700" }, "message": "[IPv6]: Fix ICMPv6 redirect handling with target multicast address\n\nWhen the ICMPv6 Target address is multicast, Linux processes the \nredirect instead of dropping it. The problem is in this code in \nndisc_redirect_rcv():\n\n if (ipv6_addr_equal(dest, target)) {\n on_link \u003d 1;\n } else if (!(ipv6_addr_type(target) \u0026 IPV6_ADDR_LINKLOCAL)) {\n ND_PRINTK2(KERN_WARNING\n \"ICMPv6 Redirect: target address is not \nlink-local.\\n\");\n return;\n }\n\nThis second check will succeed if the Target address is, for example, \nFF02::1 because it has link-local scope. Instead, it should be checking \nif it\u0027s a unicast link-local address, as stated in RFC 2461/4861 Section \n8.1:\n\n - The ICMP Target Address is either a link-local address (when\n redirected to a router) or the same as the ICMP Destination\n Address (when redirected to the on-link destination).\n\nI know this doesn\u0027t explicitly say unicast link-local address, but it\u0027s \nimplied.\n\nThis bug is preventing Linux kernels from achieving IPv6 Logo Phase II \ncertification because of a recent error that was found in the TAHI test \nsuite - Neighbor Disovery suite test 206 (v6LC.2.3.6_G) had the \nmulticast address in the Destination field instead of Target field, so \nwe were passing the test. This won\u0027t be the case anymore.\n\nThe patch below fixes this problem, and also fixes ndisc_send_redirect() \nto not send an invalid redirect with a multicast address in the Target \nfield. I re-ran the TAHI Neighbor Discovery section to make sure Linux \npasses all 245 tests now.\n\nSigned-off-by: Brian Haley \u003cbrian.haley@hp.com\u003e\nAcked-by: David L Stevens \u003cdlstevens@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f8ab18d2d987a59ccbf0495032b2aef05b730037", "tree": "7a24c79632c91e22235888875813950c6c30d929", "parents": [ "e79ad711a0108475c1b3a03815527e7237020b08" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Fri Sep 28 15:18:35 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Fri Sep 28 15:18:35 2007 -0700" }, "message": "[TCP]: Fix MD5 signature handling on big-endian.\n\nBased upon a report and initial patch by Peter Lieven.\n\ntcp4_md5sig_key and tcp6_md5sig_key need to start with\nthe exact same members as tcp_md5sig_key. Because they\nare both cast to that type by tcp_v{4,6}_md5_do_lookup().\n\nUnfortunately tcp{4,6}_md5sig_key use a u16 for the key\nlength instead of a u8, which is what tcp_md5sig_key\nuses. This just so happens to work by accident on\nlittle-endian, but on big-endian it doesn\u0027t.\n\nInstead of casting, just place tcp_md5sig_key as the first member of\nthe address-family specific structures, adjust the access sites, and\nkill off the ugly casts.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6ae5f983cf8de769214d2d9e8a783c881eccd4cd", "tree": "bfc249a8c92e1cbd73845b502eadb4516eb46c69", "parents": [ "2a0c6c980d209827e5d69017fa736f107a744d1d" ], "author": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Sun Sep 16 14:48:21 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Sep 16 14:48:21 2007 -0700" }, "message": "[IPV6]: Fix source address selection.\n\nThe commit 95c385 broke proper source address selection for cases in which \nthere is a address which is makred \u0027deprecated\u0027. The commit mistakenly \nchanged ifa-\u003eflags to ifa_result-\u003eflags (probably copy/paste error from a \nfew lines above) in the \u0027Rule 3\u0027 address selection code.\n\nThe patch restores the previous RFC-compliant behavior.\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cd562c9859f648d78224e9fc0dafa5a3d5000fdb", "tree": "845cd92b8d59598495427b1aeb32c6d7e2410911", "parents": [ "3ef9d943d26dea764f4fecf3767001c90b778b0c" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Sep 14 17:15:01 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Sep 14 17:15:01 2007 -0700" }, "message": "[IPV6]: Just increment OutDatagrams once per a datagram.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3ef9d943d26dea764f4fecf3767001c90b778b0c", "tree": "f1fab72a4de636b6019374380dfb3afc9b3f9888", "parents": [ "e1e992e52faa588667e1378a2573b4b8e3fa6670" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Sep 14 16:45:40 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Sep 14 16:45:40 2007 -0700" }, "message": "[IPV6]: Fix unbalanced socket reference with MSG_CONFIRM.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e1f52208bb968291f7d9142eff60b62984b4a511", "tree": "562076978b4a8f71f4cf49903496cf95ab02d3d2", "parents": [ "16fcec35e7d7c4faaa4709f6434a4a25b06d25e3" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Sep 11 11:31:43 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Sep 11 11:31:43 2007 +0200" }, "message": "[IPv6]: Fix NULL pointer dereference in ip6_flush_pending_frames\n\nSome of skbs in sk-\u003ewrite_queue do not have skb-\u003edst because\nwe do not fill skb-\u003edst when we allocate new skb in append_data().\n\nBTW, I think we may not need to (or we should not) increment some stats\nwhen using corking; if 100 sendmsg() (with MSG_MORE) result in 2 packets,\nhow many should we increment?\n\nIf 100, we should set skb-\u003edst for every queued skbs.\n\nIf 1 (or 2 (*)), we increment the stats for the first queued skb and\nwe should just skip incrementing OutDiscards for the rest of queued skbs,\nadn we should also impelement this semantics in other places;\ne.g., we should increment other stats just once, not 100 times.\n\n*: depends on the place we are discarding the datagram.\n\nI guess should just increment by 1 (or 2).\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "16fcec35e7d7c4faaa4709f6434a4a25b06d25e3", "tree": "5febf4d688f2c32ed55e02bc20246388b74d85e4", "parents": [ "0fb96701376874c9f1f80322f89a5bf4457c709f" ], "author": { "name": "Neil Horman", "email": "nhorman@tuxdriver.com", "time": "Tue Sep 11 11:28:26 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Sep 11 11:28:26 2007 +0200" }, "message": "[NETFILTER]: Fix/improve deadlock condition on module removal netfilter\n\nSo I\u0027ve had a deadlock reported to me. I\u0027ve found that the sequence of\nevents goes like this:\n\n1) process A (modprobe) runs to remove ip_tables.ko\n\n2) process B (iptables-restore) runs and calls setsockopt on a netfilter socket,\nincreasing the ip_tables socket_ops use count\n\n3) process A acquires a file lock on the file ip_tables.ko, calls remove_module\nin the kernel, which in turn executes the ip_tables module cleanup routine,\nwhich calls nf_unregister_sockopt\n\n4) nf_unregister_sockopt, seeing that the use count is non-zero, puts the\ncalling process into uninterruptible sleep, expecting the process using the\nsocket option code to wake it up when it exits the kernel\n\n4) the user of the socket option code (process B) in do_ipt_get_ctl, calls\nipt_find_table_lock, which in this case calls request_module to load\nip_tables_nat.ko\n\n5) request_module forks a copy of modprobe (process C) to load the module and\nblocks until modprobe exits.\n\n6) Process C. forked by request_module process the dependencies of\nip_tables_nat.ko, of which ip_tables.ko is one.\n\n7) Process C attempts to lock the request module and all its dependencies, it\nblocks when it attempts to lock ip_tables.ko (which was previously locked in\nstep 3)\n\nTheres not really any great permanent solution to this that I can see, but I\u0027ve\ndeveloped a two part solution that corrects the problem\n\nPart 1) Modifies the nf_sockopt registration code so that, instead of using a\nuse counter internal to the nf_sockopt_ops structure, we instead use a pointer\nto the registering modules owner to do module reference counting when nf_sockopt\ncalls a modules set/get routine. This prevents the deadlock by preventing set 4\nfrom happening.\n\nPart 2) Enhances the modprobe utilty so that by default it preforms non-blocking\nremove operations (the same way rmmod does), and add an option to explicity\nrequest blocking operation. So if you select blocking operation in modprobe you\ncan still cause the above deadlock, but only if you explicity try (and since\nroot can do any old stupid thing it would like.... :) ).\n\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9e3be4b34364a670bd6e57d2e8c3caabdd8d89f8", "tree": "2282e4480875948c6fff379a24ca027a324d6ecf", "parents": [ "a2221f308dabb95abb914ad858d36c2462705558" ], "author": { "name": "Denis V. Lunev", "email": "den@openvz.org", "time": "Tue Sep 11 11:04:49 2007 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Sep 11 11:04:49 2007 +0200" }, "message": "[IPV6]: Freeing alive inet6 address\n\nFrom: Denis V. Lunev \u003cden@openvz.org\u003e\n\naddrconf_dad_failure calls addrconf_dad_stop which takes referenced address\nand drops the count. So, in6_ifa_put perrformed at out: is extra. This\nresults in message: \"Freeing alive inet6 address\" and not released dst entries.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a96fb49be3dd2031f722bf32af6ed7db965b60f7", "tree": "3c02106c65a3013990007d9bdf2708616bc9ba6e", "parents": [ "36d98d3edce12c8f9ffd33f8f5d23ce728380925" ], "author": { "name": "Flavio Leitner", "email": "fleitner@redhat.com", "time": "Fri Aug 24 22:16:39 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Aug 26 18:35:35 2007 -0700" }, "message": "[NET]: Fix IP_ADD/DROP_MEMBERSHIP to handle only connectionless\n\nFix IP[V6]_ADD_MEMBERSHIP and IP[V6]_DROP_MEMBERSHIP to\nreturn -EPROTO for connection oriented sockets.\n\nSigned-off-by: Flavio Leitner \u003cfleitner@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8984e41d18a545320201950b8721e7ce3ac2a5e7", "tree": "086c209698a9d9e1bc60e3cf572c2593a02073c0", "parents": [ "d92a7db710c32db826a00ba9bc7a22e741d5041e" ], "author": { "name": "Wei Yongjun", "email": "yjwei@cn.fujitsu.com", "time": "Tue Aug 21 20:59:08 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Aug 21 20:59:08 2007 -0700" }, "message": "[IPV6]: Fix kernel panic while send SCTP data with IP fragments\n\nIf ICMP6 message with \"Packet Too Big\" is received after send SCTP DATA,\nkernel panic will occur when SCTP DATA is send again.\n\nThis is because of a bad dest address when call to skb_copy_bits().\n\nThe messages sequence is like this:\n\nEndpoint A Endpoint B\n \u003c------- SCTP DATA (size\u003d1432)\nICMP6 message -------\u003e\n(Packet Too Big pmtu\u003d1280)\n \u003c------- Resend SCTP DATA (size\u003d1432)\n------------kernel panic---------------\n\n printing eip:\nc05be62a\n*pde \u003d 00000000\nOops: 0002 [#1]\nSMP\nModules linked in: scomm l2cap bluetooth ipv6 dm_mirror dm_mod video output sbs battery lp floppy sg i2c_piix4 i2c_core pcnet32 mii button ac parport_pc parport ide_cd cdrom serio_raw mptspi mptscsih mptbase scsi_transport_spi sd_mod scsi_mod ext3 jbd ehci_hcd ohci_hcd uhci_hcd\nCPU: 0\nEIP: 0060:[\u003cc05be62a\u003e] Not tainted VLI\nEFLAGS: 00010282 (2.6.23-rc2 #1)\nEIP is at skb_copy_bits+0x4f/0x1ef\neax: 000004d0 ebx: ce12a980 ecx: 00000134 edx: cfd5a880\nesi: c8246858 edi: 00000000 ebp: c0759b14 esp: c0759adc\nds: 007b es: 007b fs: 00d8 gs: 0000 ss: 0068\nProcess swapper (pid: 0, ti\u003dc0759000 task\u003dc06d0340 task.ti\u003dc0713000)\nStack: c0759b88 c0405867 ce12a980 c8bff838 c789c084 00000000 00000028 cfd5a880\n d09f1890 000005dc 0000007b ce12a980 cfd5a880 c8bff838 c0759b88 d09bc521\n 000004d0 fffff96c 00000200 00000100 c0759b50 cfd5a880 00000246 c0759bd4\nCall Trace:\n [\u003cc0405e1d\u003e] show_trace_log_lvl+0x1a/0x2f\n [\u003cc0405ecd\u003e] show_stack_log_lvl+0x9b/0xa3\n [\u003cc040608d\u003e] show_registers+0x1b8/0x289\n [\u003cc0406271\u003e] die+0x113/0x246\n [\u003cc0625dbc\u003e] do_page_fault+0x4ad/0x57e\n [\u003cc0624642\u003e] error_code+0x72/0x78\n [\u003cd09bc521\u003e] ip6_output+0x8e5/0xab2 [ipv6]\n [\u003cd09bcec1\u003e] ip6_xmit+0x2ea/0x3a3 [ipv6]\n [\u003cd0a3f2ca\u003e] sctp_v6_xmit+0x248/0x253 [sctp]\n [\u003cd0a3c934\u003e] sctp_packet_transmit+0x53f/0x5ae [sctp]\n [\u003cd0a34bf8\u003e] sctp_outq_flush+0x555/0x587 [sctp]\n [\u003cd0a34d3c\u003e] sctp_retransmit+0xf8/0x10f [sctp]\n [\u003cd0a3d183\u003e] sctp_icmp_frag_needed+0x57/0x5b [sctp]\n [\u003cd0a3ece2\u003e] sctp_v6_err+0xcd/0x148 [sctp]\n [\u003cd09cf1ce\u003e] icmpv6_notify+0xe6/0x167 [ipv6]\n [\u003cd09d009a\u003e] icmpv6_rcv+0x7d7/0x849 [ipv6]\n [\u003cd09be240\u003e] ip6_input+0x1dc/0x310 [ipv6]\n [\u003cd09be965\u003e] ipv6_rcv+0x294/0x2df [ipv6]\n [\u003cc05c3789\u003e] netif_receive_skb+0x2d2/0x335\n [\u003cc05c5733\u003e] process_backlog+0x7f/0xd0\n [\u003cc05c58f6\u003e] net_rx_action+0x96/0x17e\n [\u003cc042e722\u003e] __do_softirq+0x64/0xcd\n [\u003cc0406f37\u003e] do_softirq+0x5c/0xac\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nCode: 00 00 29 ca 89 d0 2b 45 e0 89 55 ec 85 c0 7e 35 39 45 08 8b 55 e4 0f 4e 45 08 8b 75 e0 8b 7d dc 89 c1 c1 e9 02 03 b2 a0 00 00 00 \u003cf3\u003e a5 89 c1 83 e1 03 74 02 f3 a4 29 45 08 0f 84 7b 01 00 00 01\nEIP: [\u003cc05be62a\u003e] skb_copy_bits+0x4f/0x1ef SS:ESP 0068:c0759adc\nKernel panic - not syncing: Fatal exception in interrupt\n\nArnaldo says:\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nThanks! I\u0027m to blame for this one, problem was introduced in:\n\nb0e380b1d8a8e0aca215df97702f99815f05c094\n\n@@ -761,7 +762,7 @@ slow_path:\n /*\n * Copy a block of the IP datagram.\n */\n- if (skb_copy_bits(skb, ptr, frag-\u003eh.raw, len))\n+ if (skb_copy_bits(skb, ptr, skb_transport_header(skb),\nlen))\n BUG();\n left -\u003d len;\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@ghostprotocols.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "660adc6e60bc8882b16e466c09401cff017dcd94", "tree": "8274d6dd489b5ee7fd410f71ae10c1818041335e", "parents": [ "3b1855255098e1f78fa74c0f3378c0391e9a7a2b" ], "author": { "name": "Ilpo Järvinen", "email": "ilpo.jarvinen@helsinki.fi", "time": "Wed Aug 15 15:07:30 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Aug 15 15:07:30 2007 -0700" }, "message": "[IPv6]: Invalid semicolon after if statement\n\nA similar fix to netfilter from Eric Dumazet inspired me to\nlook around a bit by using some grep/sed stuff as looking for\nthis kind of bugs seemed easy to automate. This is one of them\nI found where it looks like this semicolon is not valid.\n\nSigned-off-by: Ilpo Järvinen \u003cilpo.jarvinen@helsinki.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "703310e645c639a84e7f4b35d8a508acde9ef360", "tree": "b175463812432b9e6cd2c6e412d0d5d3601bc5ff", "parents": [ "f49f9967b263cc88b48d912172afdc621bcb0a3c" ], "author": { "name": "Jesper Juhl", "email": "jesper.juhl@gmail.com", "time": "Fri Aug 10 15:17:58 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Aug 13 22:52:03 2007 -0700" }, "message": "[IPV6]: Clean up duplicate includes in net/ipv6/\n\nThis patch cleans up duplicate includes in\n\tnet/ipv6/\n\nSigned-off-by: Jesper Juhl \u003cjesper.juhl@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3516ffb0fef710749daf288c0fe146503e0cf9d4", "tree": "f3e3cd29dd541a457e61152560fe4416642a69bc", "parents": [ "1bcabbdb0bdfe8b15b05150a7857646430aaa7f8" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Aug 02 19:23:56 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Aug 02 19:42:28 2007 -0700" }, "message": "[TCP]: Invoke tcp_sendmsg() directly, do not use inet_sendmsg().\n\nAs discovered by Evegniy Polyakov, if we try to sendmsg after\na connection reset, we can do incredibly stupid things.\n\nThe core issue is that inet_sendmsg() tries to autobind the\nsocket, but we should never do that for TCP. Instead we should\njust go straight into TCP\u0027s sendmsg() code which will do all\nof the necessary state and pending socket error checks.\n\nTCP\u0027s sendpage already directly vectors to tcp_sendpage(), so this\nmerely brings sendmsg() in line with that.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1a3a206f7f2aa50545cc3d056405ad7bc3c9bca8", "tree": "3eb0cfd199701941e7bf3cfb9d2effb165a5c79c", "parents": [ "fea1ab0fcf117bc1e9c9285af6463d31d9cc0ac6" ], "author": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Mon Jul 30 18:04:57 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 31 02:28:26 2007 -0700" }, "message": "[NETFILTER]: Make nf_ct_ipv6_skip_exthdr() static.\n\nnf_ct_ipv6_skip_exthdr() can now become static.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c61a7d10efbd187ab9bb54871238ebd1dfcacd44", "tree": "287c054f014d36394551fb26517da5dd8beaa938", "parents": [ "0773192b0f8914222cd27e682c49f978a6c7860a" ], "author": { "name": "Dave Johnson", "email": "djohnson@sw.starentnetworks.com", "time": "Mon Jul 30 17:19:31 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 31 02:28:21 2007 -0700" }, "message": "[IPV6]: ipv6_addr_type() doesn\u0027t know about RFC4193 addresses.\n\nipv6_addr_type() doesn\u0027t check for \u0027Unique Local IPv6 Unicast\nAddresses\u0027 (RFC4193) and returns IPV6_ADDR_RESERVED for that range.\n\nSCTP uses this function and will fail bind() and connect() calls that\nuse RFC4193 addresses, SCTP will also ignore inbound connections from\nRFC4193 addresses if listening on IPV6_ADDR_ANY.\n\nThere may be other users of ipv6_addr_type() that could also have\nproblems.\n\nSigned-off-by: Dave Johnson \u003cdjohnson@sw.starentnetworks.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b217d616a15fcfb3caf2a72c1a071c6d3f182f8d", "tree": "301422d7c0fba653dfb5e32c80fedc2cede627e3", "parents": [ "fcc5a03ac42564e9e255c1134dda47442289e466" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jul 30 17:04:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 31 02:28:16 2007 -0700" }, "message": "[IPV4/IPV6]: Fail registration if inet device construction fails\n\nNow that netdev notifications can fail, we can use this to signal\nerrors during registration for IPv4/IPv6. In particular, if we\nfail to allocate memory for the inet device, we can fail the netdev\nregistration.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "566cfd8f0e049a0647f94714f913e2a975dc464f", "tree": "955049995c9cc06dc2db3b11a73454c09cf8eb18", "parents": [ "342ff7b24f42d01b27d884c699855c713d720fcb" ], "author": { "name": "Simon Arlott", "email": "simon@fire.lp0.eu", "time": "Thu Jul 26 00:09:55 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 31 02:28:04 2007 -0700" }, "message": "[IPV6]: Don\u0027t update ADVMSS on routes where the MTU is not also updated\n\nThe ADVMSS value was incorrectly updated for ALL routes when the MTU\nis updated because it\u0027s outside the effect of the if statement\u0027s\ncondition.\n\nSigned-off-by: Simon Arlott \u003csimon@fire.lp0.eu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "704eae1f32274c0435f7f3924077afdb811edd1d", "tree": "211d333d6f50ea078b6f4f29f0734eadcecdc37b", "parents": [ "a34c45896a723ee7b13128ac8bf564ea42fcd1eb" ], "author": { "name": "Al Viro", "email": "viro@ftp.linux.org.uk", "time": "Thu Jul 26 17:33:29 2007 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Jul 26 11:11:56 2007 -0700" }, "message": "ip6_tunnel - endianness annotations\n\nConvert rel_info to host-endian before calling ip6_tnl_err().\nThe things become much more straightforward that way.\nThe key observation (and the reason why that code actually\nworked) is that after ip6_tnl_err() we either immediately\nbailed out or had rel_info set to 0 or had it set to host-endian\nand guaranteed to hit\n(rel_type \u003d\u003d ICMP_DEST_UNREACH \u0026\u0026 rel_code \u003d\u003d ICMP_FRAG_NEEDED)\ncase. So inconsistent endianness didn\u0027t really lead to bugs,\nbut it had been subtle and prone to breakage. New variant is\nsaner and obviously safe.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7e2acc7e2711d51705373ac201333c9a0ebd3950", "tree": "06bd3d776970a2e09bfca5c67dad4490fd1ea7c0", "parents": [ "ca983cefd950ec929582dd95ba6e46d12c2c6959" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Jul 24 15:29:55 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jul 24 15:29:55 2007 -0700" }, "message": "[NETFILTER]: Fix logging regression\n\nLoading one of the LOG target fails if a different target has already\nregistered itself as backend for the same family. This can affect the\nipt_LOG and ipt_ULOG modules when both are loaded.\n\nReported and tested by: \u003ct.artem@mailcity.com\u003e\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ca983cefd950ec929582dd95ba6e46d12c2c6959", "tree": "db9ebcec76d7b44c4e4e77720144a80a87371f91", "parents": [ "b8c1c5da1520977cb55a358f20fc09567d40cad9" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jul 24 15:27:30 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jul 24 15:27:30 2007 -0700" }, "message": "[TCPv6] MD5SIG: Ensure to reset allocation count to avoid panic.\n\nAfter clearing all passwords for IPv6 peers, we need to \nset allocation count to zero as well as we free the storage.\nOtherwise, we panic when a user trys to (re)add a password.\n\nDiscovered and fixed by MIYAJIMA Mitsuharu \u003cmiyajima.mitsuharu@anchor.jp\u003e.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b77f2fa6299af4bbb7aa50c5064a0f087ea089d9", "tree": "3b6a14539b29c66b67d0ffd04e0353319f0a1ec3", "parents": [ "43a415138d8133587c0901d29941b821b86e9e7d" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Sat Jul 21 19:09:41 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jul 21 19:09:41 2007 -0700" }, "message": "[IPV6]: endianness bug in ip6_tunnel\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "20c2df83d25c6a95affe6157a4c9cac4cf5ffaac", "tree": "415c4453d2b17a50abe7a3e515177e1fa337bd67", "parents": [ "64fb98fc40738ae1a98bcea9ca3145b89fb71524" ], "author": { "name": "Paul Mundt", "email": "lethal@linux-sh.org", "time": "Fri Jul 20 10:11:58 2007 +0900" }, "committer": { "name": "Paul Mundt", "email": "lethal@linux-sh.org", "time": "Fri Jul 20 10:11:58 2007 +0900" }, "message": "mm: Remove slab destructors from kmem_cache_create().\n\nSlab destructors were no longer supported after Christoph\u0027s\nc59def9f222d44bb7e2f0a559f2906191a0862d7 change. They\u0027ve been\nBUGs for both slab and slub, and slob never supported them\neither.\n\nThis rips out support for the dtor pointer from kmem_cache_create()\ncompletely and fixes up every single callsite in the kernel (there were\nabout 224, not including the slab allocator definitions themselves,\nor the documentation references).\n\nSigned-off-by: Paul Mundt \u003clethal@linux-sh.org\u003e\n" }, { "commit": "063ed369c97f8de4cce23bf93bebd7ffacb542ff", "tree": "5f49aa74d457b671879ec6ec001edd4cd06cc758", "parents": [ "c3bc7cff8fddb6ff9715be8bfc3d911378c4d69d" ], "author": { "name": "Vlad Yasevich", "email": "vladislav.yasevich@hp.com", "time": "Sun Jul 15 00:16:35 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Jul 15 00:16:35 2007 -0700" }, "message": "[IPV6]: Call inet6addr_chain notifiers on link down\n\nCurrently if the link is brought down via ip link or ifconfig down,\nthe inet6addr_chain notifiers are not called even though all\nthe addresses are removed from the interface. This caused SCTP\nto add duplicate addresses to it\u0027s list.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f13ec93fba60d339dc1663eb47b2fb801225d2d2", "tree": "1f6f12311f307d46b33a2a2afae43853f28fb5ad", "parents": [ "d09f51b6997f3f443c5741bc696651e479576715" ], "author": { "name": "Dmitry Butskoy", "email": "dmitry@butskoy.name", "time": "Sat Jul 14 23:53:08 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jul 14 23:53:08 2007 -0700" }, "message": "[IPV6]: MSG_ERRQUEUE messages do not pass to connected raw sockets\n\nFrom: Dmitry Butskoy \u003cdmitry@butskoy.name\u003e\n\nTaken from http://bugzilla.kernel.org/show_bug.cgi?id\u003d8747\n\nProblem Description:\n\nIt is related to the possibility to obtain MSG_ERRQUEUE messages from the udp\nand raw sockets, both connected and unconnected.\n\nThere is a little typo in net/ipv6/icmp.c code, which prevents such messages\nto be delivered to the errqueue of the correspond raw socket, when the socket\nis CONNECTED. The typo is due to swap of local/remote addresses.\n\nConsider __raw_v6_lookup() function from net/ipv6/raw.c. When a raw socket is\nlooked up usual way, it is something like:\n\nsk \u003d __raw_v6_lookup(sk, nexthdr, daddr, saddr, IP6CB(skb)-\u003eiif);\n\nwhere \"daddr\" is a destination address of the incoming packet (IOW our local\naddress), \"saddr\" is a source address of the incoming packet (the remote end).\n\nBut when the raw socket is looked up for some icmp error report, in\nnet/ipv6/icmp.c:icmpv6_notify() , daddr/saddr are obtained from the echoed\nfragment of the \"bad\" packet, i.e. \"daddr\" is the original destination\naddress of that packet, \"saddr\" is our local address. Hence, for\nicmpv6_notify() must use \"saddr, daddr\" in its arguments, not \"daddr, saddr\"\n...\n\nSteps to reproduce:\n\nCreate some raw socket, connect it to an address, and cause some error\nsituation: f.e. set ttl\u003d1 where the remote address is more than 1 hop to reach.\nSet IPV6_RECVERR .\nThen send something and wait for the error (f.e. poll() with POLLERR|POLLIN).\nYou should receive \"time exceeded\" icmp message (because of \"ttl\u003d1\"), but the\nsocket do not receive it.\n\nIf you do not connect your raw socket, you will receive MSG_ERRQUEUE\nsuccessfully. (The reason is that for unconnected socket there are no actual\nchecks for local/remote addresses).\n\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "61075af51f252913401c41fbe94075b46c94e9f1", "tree": "bf97f2a5ed93ed1767953b0ae8678d921ebc0473", "parents": [ "370786f9cfd430cb424f00ce4110e75bb1b95a19" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Jul 14 20:48:19 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jul 14 20:48:19 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack: mark protocols __read_mostly\n\nAlso remove two unnecessary EXPORT_SYMBOLs and move the\nnf_conntrack_l3proto_ipv4 declaration to the correct file.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a887c1c148ffb3eb1c193e9869ca5297c6e22078", "tree": "d0fe99a74d2fad3984aa4b3946f9b50b5adebbce", "parents": [ "130e7a83d7ec8c5c673225e0fa8ea37b1ed507a5" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Jul 14 20:46:15 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jul 14 20:46:15 2007 -0700" }, "message": "[NETFILTER]: Lower *tables printk severity\n\nLower ip6tables, arptables and ebtables printk severity similar to\nDan Aloni\u0027s patch for iptables.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e2a3123fbe58da9fd3f35cd242087896ace6049f", "tree": "f17f8b6f505bb50be97e204c382a92288f75c986", "parents": [ "ffc30690480bdd337e4914302b926d24870b56b2" ], "author": { "name": "Yasuyuki Kozakai", "email": "yasuyuki.kozakai@toshiba.co.jp", "time": "Sat Jul 14 20:45:14 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jul 14 20:45:14 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack: Introduces nf_ct_get_tuplepr and uses it\n\nnf_ct_get_tuple() requires the offset to transport header and that bothers\ncallers such as icmp[v6] l4proto modules. This introduces new function\nto simplify them.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ffc30690480bdd337e4914302b926d24870b56b2", "tree": "805dfdda135a6f91648aded75b1cfb754705a4b4", "parents": [ "d87d8469e2dd19a3a134b99f78288d41854c614b" ], "author": { "name": "Yasuyuki Kozakai", "email": "yasuyuki.kozakai@toshiba.co.jp", "time": "Sat Jul 14 20:44:50 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jul 14 20:44:50 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack: make l3proto-\u003eprepare() generic and renames it\n\nThe icmp[v6] l4proto modules parse headers in ICMP[v6] error to get tuple.\nBut they have to find the offset to transport protocol header before that.\nTheir processings are almost same as prepare() of l3proto modules.\nThis makes prepare() more generic to simplify icmp[v6] l4proto module\nlater.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d87d8469e2dd19a3a134b99f78288d41854c614b", "tree": "c976ea2c818ecfb1fb3b6d96eaa2bd7859c19d09", "parents": [ "6460d948f3ebf7d5040328a60a0ab7221f69945b" ], "author": { "name": "Yasuyuki Kozakai", "email": "yasuyuki.kozakai@toshiba.co.jp", "time": "Sat Jul 14 20:44:23 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jul 14 20:44:23 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack: Increment error count on parsing IPv4 header\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "56b3d975bbce65f655c5612b4822da671f9fd9b2", "tree": "7e29d70405d9c8e28ddee3b03a07157477fc780f", "parents": [ "3be550f34b03e5eb762f74d447ebbeba97efbd6d" ], "author": { "name": "Philippe De Muyter", "email": "phdm@macqel.be", "time": "Tue Jul 10 23:07:31 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jul 10 23:07:31 2007 -0700" }, "message": "[NET]: Make all initialized struct seq_operations const.\n\nMake all initialized struct seq_operations in net/ const\n\nSigned-off-by: Philippe De Muyter \u003cphdm@macqel.be\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dffe4f048b420f1af0b10a6090add0c5ea69e585", "tree": "9229870705d35aaf0190521514e865625844a5e3", "parents": [ "ed8b548ce3cb988f59a0fd9af6ccdc4f8198cd19" ], "author": { "name": "Micah Gruber", "email": "micah.gruber@gmail.com", "time": "Tue Jul 10 23:04:19 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jul 10 23:04:19 2007 -0700" }, "message": "[IPV6]: Remove unneeded pointer idev from addrconf_cleanup().\n\nThis trivial patch removes the unneeded pointer idev returned from\n__in6_dev_get(), which is never used. The check for NULL can be simply\ndone by if (__in6_dev_get(dev) \u003d\u003d NULL).\n\nSigned-off-by: Micah Gruber \u003cmicah.gruber@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4c752098f529f41abfc985426a3eca0f2cb96676", "tree": "038e2f0c488619ff1cd7d278d393852ea7202f6a", "parents": [ "bb4dbf9e61d0801927e7df2569bb3dd8287ea301" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Wed May 23 13:28:48 2007 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:56:31 2007 -0700" }, "message": "[IPV6]: Make IPV6_{RECV,2292}RTHDR boolean options.\n\nBecause reversing RH0 is no longer supported by deprecation\nof RH0, let\u0027s make IPV6_{RECV,2292}RTHDR boolean options.\nBoolean are more appropriate from standard POV.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bb4dbf9e61d0801927e7df2569bb3dd8287ea301", "tree": "62d0878b6128fbed608bdee342e705fd371c78cd", "parents": [ "c382bb9d32a55029fb13b118858e25908fab4617" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jul 10 22:55:49 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jul 10 22:55:49 2007 -0700" }, "message": "[IPV6]: Do not send RH0 anymore.\n\nBased on \u003cdraft-ietf-ipv6-deprecate-rh0-00.txt\u003e.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c382bb9d32a55029fb13b118858e25908fab4617", "tree": "0a7466b0e27ec88d27af579393d26df80c38a35e", "parents": [ "c9726d6890f7f3a892c879e067c3ed839f61e745" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Tue Jul 10 22:47:58 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Jul 10 22:47:58 2007 -0700" }, "message": "[IPV6]: Restore semantics of Routing Header processing.\n\nThe \"fix\" for emerging security threat was overkill and it broke\nbasic semantic of IPv6 routing header processing. We should assume\nRT0 (or even RT2, depends on configuration) as \"unknown\" RH type so\nthat we\n- silently ignore the routing header if segleft \u003d\u003d 0\n- send ICMPv6 Parameter Problem message back to the sender,\n otherwise.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cfbba49d80be6cf8d3872b66fc5421f119843b36", "tree": "2e2a966d43b6cd80c2ae7c8d5e37ab4c8a0262ad", "parents": [ "4839c52b01ca91be1c62761e08fb3deb3881e857" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Jul 09 15:33:40 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:19:05 2007 -0700" }, "message": "[NET]: Avoid copying writable clones in tunnel drivers\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0d53778e81ac7af266dac8a20cc328328c327112", "tree": "034226154ea7c3466a31ef2d57b5a600d4a106e6", "parents": [ "342b7e3c8a3c84252799c4ac4d9a604b8903d2b4" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Jul 07 22:39:38 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:18:20 2007 -0700" }, "message": "[NETFILTER]: Convert DEBUGP to pr_debug\n\nConvert DEBUGP to pr_debug and fix lots of non-compiling debug statements.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "330f7db5e578e1e298ba3a41748e5ea333a64a2b", "tree": "1557656cf800dcee7915cb41c94d4ce644947c61", "parents": [ "f205c5e0c28aa7e0fb6eaaa66e97928f9d9e6994" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Jul 07 22:28:42 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:17:41 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack: remove \u0027ignore_conntrack\u0027 argument from nf_conntrack_find_get\n\nAll callers pass NULL, this also doesn\u0027t seem very useful for modules.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dacd2a1a5cf621288833aa3c6e815b86a1536538", "tree": "c615b95aa1518c6518df35acd481ed4af19acd61", "parents": [ "ff09b7493c8f433d3ffd6a31ad58d190f82ef0c5" ], "author": { "name": "Yasuyuki Kozakai", "email": "yasuyuki.kozakai@toshiba.co.jp", "time": "Sat Jul 07 22:25:51 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:17:35 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack: remove old memory allocator of conntrack\n\nNow memory space for help and NAT are allocated by extension\ninfrastructure.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9f15c5302de4e8b0aac7ca24c36bf26a7fe1a513", "tree": "f9bf5883558941b1ad519f02106f53eefc90ba38", "parents": [ "ba9dda3ab5a865542e69dfe01edb2436857c9420" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Jul 07 22:22:02 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:17:15 2007 -0700" }, "message": "[NETFILTER]: x_tables: mark matches and targets __read_mostly\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ba9dda3ab5a865542e69dfe01edb2436857c9420", "tree": "93f92442a8ad134d78b4d7cd8dc74e089baef3d7", "parents": [ "1b50b8a371e90a5e110f466e4ac02cf6b5f681de" ], "author": { "name": "Jozsef Kadlecsik", "email": "kadlec@blackhole.kfki.hu", "time": "Sat Jul 07 22:21:23 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:17:14 2007 -0700" }, "message": "[NETFILTER]: x_tables: add TRACE target\n\nThe TRACE target can be used to follow IP and IPv6 packets through\nthe ruleset.\n\nSigned-off-by: Jozsef Kadlecsik \u003ckadlec@blackhole.kfki.hu\u003e\nSigned-off-by: Patrick NcHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7c4e36bc172ae1accde835b880fdc4a2c2a3df57", "tree": "e89d34ec33180a75fd15cc07e7d81ec9a7d4f5a4", "parents": [ "170b197c0afc621179f0f82284e331e3c252b7cf" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@gmx.de", "time": "Sat Jul 07 22:19:08 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:17:11 2007 -0700" }, "message": "[NETFILTER]: Remove redundant parentheses/braces\n\nRemoves redundant parentheses and braces (And add one pair in a\nxt_tcpudp.c macro).\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@gmx.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a47362a226456d8db8207e618324a2278d05d3a7", "tree": "9431e971844582fd65a8cdd234cf89d72c6e4c6c", "parents": [ "e1931b784a8de324abf310fa3b5e3f25d3988233" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@gmx.de", "time": "Sat Jul 07 22:16:55 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:17:01 2007 -0700" }, "message": "[NETFILTER]: add some consts, remove some casts\n\nMake a number of variables const and/or remove unneeded casts.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@gmx.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e1931b784a8de324abf310fa3b5e3f25d3988233", "tree": "3f553c7fed76a21efc96cc0eb4fa7bd69722f94d", "parents": [ "ccb79bdce71f2c04cfa9bfcbaf4d37e2f963d684" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@gmx.de", "time": "Sat Jul 07 22:16:26 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:16:59 2007 -0700" }, "message": "[NETFILTER]: x_tables: switch xt_target-\u003echeckentry to bool\n\nSwitch the return type of target checkentry functions to boolean.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@gmx.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ccb79bdce71f2c04cfa9bfcbaf4d37e2f963d684", "tree": "5f41d7d1daade309b96492301a6f973caba3a2a4", "parents": [ "1d93a9cbad608f6398ba6c5b588c504ccd35a2ca" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@gmx.de", "time": "Sat Jul 07 22:16:00 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:16:58 2007 -0700" }, "message": "[NETFILTER]: x_tables: switch xt_match-\u003echeckentry to bool\n\nSwitch the return type of match functions to boolean\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@gmx.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1d93a9cbad608f6398ba6c5b588c504ccd35a2ca", "tree": "df02632a70f0438efb0e5baab9900f4f2acf98a1", "parents": [ "cff533ac12494fa002e2c46acc94d670e5f636a2" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@gmx.de", "time": "Sat Jul 07 22:15:35 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:16:57 2007 -0700" }, "message": "[NETFILTER]: x_tables: switch xt_match-\u003ematch to bool\n\nSwitch the return type of match functions to boolean\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@gmx.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cff533ac12494fa002e2c46acc94d670e5f636a2", "tree": "ab159436fa3f5c282455afafcf136fd03fa8225a", "parents": [ "7bfe24611671ec76b44281e582b38535e21f01a9" ], "author": { "name": "Jan Engelhardt", "email": "jengelh@gmx.de", "time": "Sat Jul 07 22:15:12 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:16:56 2007 -0700" }, "message": "[NETFILTER]: x_tables: switch hotdrop to bool\n\nSwitch the \"hotdrop\" variables to boolean\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@gmx.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d212f87b068c9d72065ef579d85b5ee6b8b59381", "tree": "a194d5c667c277c7ea5392c9cf97857a0cd1d321", "parents": [ "d3d6dd3adaaad71eae20902ed81808a66a40a5b9" ], "author": { "name": "Stephen Hemminger", "email": "shemminger@linux-foundation.org", "time": "Wed Jun 27 00:47:37 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:15:52 2007 -0700" }, "message": "[NET]: IPV6 checksum offloading in network devices\n\nThe existing model for checksum offload does not correctly handle\ndevices that can offload IPV4 and IPV6 only. The NETIF_F_HW_CSUM flag\nimplies device can do any arbitrary protocol.\n\nThis patch:\n * adds NETIF_F_IPV6_CSUM for those devices\n * fixes bnx2 and tg3 devices that need it\n * add NETIF_F_IPV6_CSUM to ipv6 output (incl GSO)\n * fixes assumptions about NETIF_F_ALL_CSUM in nat\n * adjusts bridge union of checksumming computation\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d3d6dd3adaaad71eae20902ed81808a66a40a5b9", "tree": "b08faa2174867f3f589889695bfa8388d2237f1e", "parents": [ "59fbb3a61e02deaeaa4fb50792217921f3002d64" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Tue Jun 26 23:57:49 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:15:43 2007 -0700" }, "message": "[XFRM]: Add module alias for transformation type.\n\nIt is clean-up for XFRM type modules and adds aliases with its\nprotocol:\n ESP, AH, IPCOMP, IPIP and IPv6 for IPsec\n ROUTING and DSTOPTS for MIPv6\n\nIt is almost the same thing as XFRM mode alias, but it is added\nnew defines XFRM_PROTO_XXX for preprocessing since some protocols\nare defined as enum.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nAcked-by: Ingo Oeser \u003cnetdev@axxeo.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "59fbb3a61e02deaeaa4fb50792217921f3002d64", "tree": "7455815c2566ba9b898cd6ea2c710159bbeb624f", "parents": [ "136ebf08b46f839e2dc9db34322b654e5d9b9936" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Tue Jun 26 23:56:32 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:15:42 2007 -0700" }, "message": "[IPV6] MIP6: Loadable module support for MIPv6.\n\nThis patch makes MIPv6 loadable module named \"mip6\".\n\nHere is a modprobe.conf(5) example to load it automatically\nwhen user application uses XFRM state for MIPv6:\n\nalias xfrm-type-10-43 mip6\nalias xfrm-type-10-60 mip6\n\nSome MIPv6 feature is not included by this modular, however,\nit should not be affected to other features like either IPsec\nor IPv6 with and without the patch.\nWe may discuss XFRM, MH (RAW socket) and ancillary data/sockopt\nseparately for future work.\n\nLoadable features:\n* MH receiving check (to send ICMP error back)\n* RO header parsing and building (i.e. RH2 and HAO in DSTOPTS)\n* XFRM policy/state database handling for RO\n\nThese are NOT covered as loadable:\n* Home Address flags and its rule on source address selection\n* XFRM sub policy (depends on its own kernel option)\n* XFRM functions to receive RO as IPv6 extension header\n* MH sending/receiving through raw socket if user application\n opens it (since raw socket allows to do so)\n* RH2 sending as ancillary data\n* RH2 operation with setsockopt(2)\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "136ebf08b46f839e2dc9db34322b654e5d9b9936", "tree": "6a38a3c546def150ff73effcf4afd9c55881f49c", "parents": [ "2371baa4bdab3268b32009926f75e7a5d3a41506" ], "author": { "name": "Masahide NAKAMURA", "email": "nakam@linux-ipv6.org", "time": "Tue Jun 26 23:51:41 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jul 10 22:15:41 2007 -0700" }, "message": "[IPV6] MIP6: Kill unnecessary ifdefs.\n\nKill unnecessary CONFIG_IPV6_MIP6.\n\no It is redundant for RAW socket to keep MH out with the config then\n it can handle any protocol.\no Clean-up at AH.\n\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c2edacf80e155ef54ae4774379d461b60896bc2e", "tree": "0ec119a16bc4af036968cf22cde402c381efca25", "parents": [ "89c0d26be7037cd5bbce3bbf12580ba70ed8f382" ], "author": { "name": "Jay Vosburgh", "email": "fubar@us.ibm.com", "time": "Mon Jul 09 10:42:47 2007 -0700" }, "committer": { "name": "Jeff Garzik", "email": "jeff@garzik.org", "time": "Tue Jul 10 12:41:19 2007 -0400" }, "message": "bonding / ipv6: no addrconf for slaves separately from master\n\n\tAt present, when a device is enslaved to bonding, if ipv6 is\nactive then addrconf will be initated on the slave (because it is closed\nthen opened during the enslavement processing). This causes DAD and RS\npackets to be sent from the slave. These packets in turn can confuse\nswitches that perform ipv6 snooping, causing them to incorrectly update\ntheir forwarding tables (if, e.g., the slave being added is an inactve\nbackup that won\u0027t be used right away) and direct traffic away from the\nactive slave to a backup slave (where the incoming packets will be\ndropped).\n\n\tThis patch alters the behavior so that addrconf will only run on\nthe master device itself. I believe this is logically correct, as it\nprevents slaves from having an IPv6 identity independent from the\nmaster. This is consistent with the IPv4 behavior for bonding.\n\n\tThis is accomplished by (a) having bonding set IFF_SLAVE sooner\nin the enslavement processing than currently occurs (before open, not\nafter), and (b) having ipv6 addrconf ignore UP and CHANGE events on\nslave devices.\n\n\tThe eql driver also uses the IFF_SLAVE flag. I inspected eql,\nand I believe this change is reasonable for its usage of IFF_SLAVE, but\nI did not test it.\n\nSigned-off-by: Jay Vosburgh \u003cfubar@us.ibm.com\u003e\nSigned-off-by: Jeff Garzik \u003cjeff@garzik.org\u003e\n" }, { "commit": "6d5b78cdd5a17665674429400b3ed10e3ec60684", "tree": "870c11d17ef2535d762658fb95b7915475b7daa8", "parents": [ "e2d8e314ad18d4302b3b7ea21ab8b2cb72f2b152" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Jun 22 16:07:04 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Jun 22 16:07:04 2007 -0700" }, "message": "[IPV6] NDISC: Fix thinko to control Router Preference support.\n\nBug reported by Haruhito Watanabe \u003charuhito@sfc.keio.ac.jp\u003e.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "74235a25c673f80147c1f975304888e8212a14d5", "tree": "e1bcacfcba1e768a975ad585d720ef8d1b7ab1e1", "parents": [ "d7ea5b91fad553e445bbe5d958b6a7b16222c092" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Jun 14 13:02:55 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jun 14 13:02:55 2007 -0700" }, "message": "[IPV6] addrconf: Fix IPv6 on tuntap tunnels\n\nThe recent patch that added ipv6_hwtype is broken on tuntap tunnels.\nIndeed, it\u0027s broken on any device that does not pass the ipv6_hwtype\ntest.\n\nThe reason is that the original test only applies to autoconfiguration,\nnot IPv6 support. IPv6 support is allowed on any device. In fact,\neven with the ipv6_hwtype patch applied you can still add IPv6 addresses\nto any interface that doesn\u0027t pass thw ipv6_hwtype test provided that\nthey have a sufficiently large MTU. This is a serious problem because\ncome deregistration time these devices won\u0027t be cleaned up properly.\n\nI\u0027ve gone back and looked at the rationale for the patch. It appears\nthat the real problem is that we were creating IPv6 devices even if the\nMTU was too small. So here\u0027s a patch which fixes that and reverts the\nipv6_hwtype stuff.\n\nThanks to Kanru Chen for reporting this issue.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3d7dbeac58d0669c37e35a3b91bb41c0146395ce", "tree": "8392d2e576f07635bda9684b2d65629ee40ecbab", "parents": [ "606f585e363527da9feaed79465132c0c661fd9e" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jun 12 14:36:42 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jun 12 14:36:42 2007 -0700" }, "message": "[TCP]: Disable TSO if MD5SIG is enabled.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "df2bc459a3ad71f8b44c358bf7169acf9caf4acd", "tree": "143206b16d59c723be3c2cf2375a33b2a9306280", "parents": [ "3c0d2f3780fc94746c4842e965bd2570e2119bb6" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jun 05 15:18:43 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Jun 07 13:40:50 2007 -0700" }, "message": "[UDP]: Revert 2-pass hashing changes.\n\nThis reverts changesets:\n\n6aaf47fa48d3c44280810b1b470261d340e4ed87\nb7b5f487ab39bc10ed0694af35651a03d9cb97ff\nde34ed91c4ffa4727964a832c46e624dd1495cf5\nfc038410b4b1643766f8033f4940bcdb1dace633\n\nThere are still some correctness issues recently\ndiscovered which do not have a known fix that doesn\u0027t\ninvolve doing a full hash table scan on port bind.\n\nSo revert for now.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3c158f7f57601bc27eab82f0dc4fd3fad314d845", "tree": "03c8f9d7fa1e51d852ff6b90c35030491613df03", "parents": [ "51055be81c3cb14d0165a7432b787098b817fd35" ], "author": { "name": "Patrick McHarrdy", "email": "kaber@trash.net", "time": "Tue Jun 05 12:55:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Jun 07 13:40:26 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack: fix helper module unload races\n\nWhen a helper module is unloaded all conntracks refering to it have their\nhelper pointer NULLed out, leading to lots of races. In most places this\ncan be fixed by proper use of RCU (they do already check for !\u003d NULL,\nbut in a racy way), additionally nf_conntrack_expect_related needs to\nbail out when no helper is present.\n\nAlso remove two paranoid BUG_ONs in nf_conntrack_proto_gre that are racy\nand not worth fixing.\n\nSigned-off-by: Patrick McHarrdy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ef7c79ed645f52bcbdd88f8d54a9702c4d3fd15d", "tree": "4c27ec3362d958b99672366437d5eb6038dd561d", "parents": [ "14a49e1fd2bb91ba2bf0e1f06711b6dbc21de02d" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Jun 05 12:38:30 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Jun 07 13:40:10 2007 -0700" }, "message": "[NETLINK]: Mark netlink policies const\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "75202e76893c11ce7f8bcc9a07f994d71e3d5113" }