)]}'
{
  "log": [
    {
      "commit": "44adf28f4a27df626d50e54c8d0669df2dd1aa89",
      "tree": "20abb0d95b08e58f8c5a7d653517737c4a6aa38b",
      "parents": [
        "e1bbdebdba615ddd957de81103aa2f7fa0581952"
      ],
      "author": {
        "name": "Thomas Voegtle",
        "email": "tv@lio96.de",
        "time": "Mon Apr 24 17:15:54 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Mon Apr 24 17:27:29 2006 -0700"
      },
      "message": "[NETFILTER]: ULOG target is not obsolete\n\nThe backend part is obsoleted, but the target itself is still needed.\n\nSigned-off-by: Thomas Voegtle \u003ctv@lio96.de\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b60b49ea6a3e1f8dcaf4148dad0daab61ab766d2",
      "tree": "83a18b5188d632692da34f9ed8265fcecb4d9f35",
      "parents": [
        "d47f3640fe2ac4da8a8e713a549e6eaf23ac2084"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Wed Apr 19 21:35:00 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Apr 19 21:35:00 2006 -0700"
      },
      "message": "[TCP]: Account skb overhead in tcp_fragment\n\nMake sure that we get the full sizeof(struct sk_buff)\nplus the data size accounted for in skb-\u003etruesize.\n\nThis will create invariants that will allow adding\nassertion checks on skb-\u003etruesize.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "63903ca6af3d9424a0c2b176f927fa7e7ab2ae8e",
      "tree": "af0dca981d11cc29b6cb94377bca6b61f1370a0e",
      "parents": [
        "40daafc80b0f6a950c9252f9f1a242ab5cb6a648"
      ],
      "author": {
        "name": "Jesper Juhl",
        "email": "jesper.juhl@gmail.com",
        "time": "Tue Apr 18 14:51:44 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Apr 18 15:57:55 2006 -0700"
      },
      "message": "[NET]: Remove redundant NULL checks before [kv]free\n\nRedundant NULL check before kfree removal\nfrom net/\n\nSigned-off-by: Jesper Juhl \u003cjesper.juhl@gmail.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ef5cb9738b488140eb6c3f32fffab08f39a4905e",
      "tree": "803d92cada2f9062417d4b6038482689b0c86f84",
      "parents": [
        "385910f2b275a636238f70844f1b6da9fda6f2da"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Tue Apr 18 13:24:14 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Apr 18 15:57:49 2006 -0700"
      },
      "message": "[TCP]: Fix truesize underflow\n\nThere is a problem with the TSO packet trimming code.  The cause of\nthis lies in the tcp_fragment() function.\n\nWhen we allocate a fragment for a completely non-linear packet the\ntruesize is calculated for a payload length of zero.  This means that\ntruesize could in fact be less than the real payload length.\n\nWhen that happens the TSO packet trimming can cause truesize to become\nnegative.  This in turn can cause sk_forward_alloc to be -n * PAGE_SIZE\nwhich would trigger the warning.\n\nI\u0027ve copied the code DaveM used in tso_fragment which should work here.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d2c962b8530b84f4e035df8ade7e35f353a57cbe",
      "tree": "5cd3e1a27642f59caea6dd8dbfd3c5461a972e0c",
      "parents": [
        "c19f7a9e1ac45b57375d51f033b02deca50f4d3f"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@osdl.org",
        "time": "Mon Apr 17 17:27:11 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 17 17:27:11 2006 -0700"
      },
      "message": "[IPV4]: ip_route_input panic fix\n\nThis fixes http://bugzilla.kernel.org/show_bug.cgi?id\u003d6388\nThe bug is caused by ip_route_input dereferencing skb-\u003enh.protocol of\nthe dummy skb passed dow from inet_rtm_getroute (Thanks Thomas for seeing\nit). It only happens if the route requested is for a multicast IP\naddress.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@osdl.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3d9dd7564d5d7c28eb87b14c13a23806484667f3",
      "tree": "3e491b16332bbd92c0c017a0d8d1f024226a3467",
      "parents": [
        "08d099974a09faf4cb11ffc46da87073fa132fc0"
      ],
      "author": {
        "name": "Zach Brown",
        "email": "zach.brown@oracle.com",
        "time": "Fri Apr 14 16:04:18 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri Apr 14 16:04:18 2006 -0700"
      },
      "message": "[PATCH] ip_output: account for fraggap when checking to add trailer_len\n\nDuring other work I noticed that ip_append_data() seemed to be forgetting to\ninclude the frag gap in its calculation of a fragment that consumes the rest of\nthe payload.  Herbert confirmed that this was a bug that snuck in during a\nprevious rework.\n\nSigned-off-by: Zach Brown \u003czach.brown@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6c97e72a162648eaf7c401cfc139493cefa6bed2",
      "tree": "c39ad40f44e0439cb7c30db3d394cb9c8496010c",
      "parents": [
        "f043ca43c1ae354346f72dc5826d820d5619f0b2"
      ],
      "author": {
        "name": "Adrian Bunk",
        "email": "bunk@stusta.de",
        "time": "Wed Apr 12 13:57:59 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Apr 14 15:00:20 2006 -0700"
      },
      "message": "[IPV4]: Possible cleanups.\n\nThis patch contains the following possible cleanups:\n- make the following needlessly global function static:\n  - arp.c: arp_rcv()\n- remove the following unused EXPORT_SYMBOL\u0027s:\n  - devinet.c: devinet_ioctl\n  - fib_frontend.c: ip_rt_ioctl\n  - inet_hashtables.c: inet_bind_bucket_create\n  - inet_hashtables.c: inet_bind_hash\n  - tcp_input.c: sysctl_tcp_abc\n  - tcp_ipv4.c: sysctl_tcp_tw_reuse\n  - tcp_output.c: sysctl_tcp_mtu_probing\n  - tcp_output.c: sysctl_tcp_base_mss\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n\n"
    },
    {
      "commit": "6f912042256c12b0927438122594f5379b364f5d",
      "tree": "c11949814057b356d5896e7f025ec15132dbff78",
      "parents": [
        "dd7ba3b8b15f9c65366986d723ae83254d8d78b7"
      ],
      "author": {
        "name": "KAMEZAWA Hiroyuki",
        "email": "kamezawa.hiroyu@jp.fujitsu.com",
        "time": "Mon Apr 10 22:52:50 2006 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@g5.osdl.org",
        "time": "Tue Apr 11 06:18:31 2006 -0700"
      },
      "message": "[PATCH] for_each_possible_cpu: network codes\n\nfor_each_cpu() actually iterates across all possible CPUs.  We\u0027ve had mistakes\nin the past where people were using for_each_cpu() where they should have been\niterating across only online or present CPUs.  This is inefficient and\npossibly buggy.\n\nWe\u0027re renaming for_each_cpu() to for_each_possible_cpu() to avoid this in the\nfuture.\n\nThis patch replaces for_each_cpu with for_each_possible_cpu under /net\n\nSigned-off-by: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nAcked-by: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n"
    },
    {
      "commit": "55c0022e53452360064ea264c41410c70565d9f8",
      "tree": "cca5e75b12dfaaadf5620b59c7121a017a799117",
      "parents": [
        "19910d1aec0b2b96ff4b4a93e2aed0d32643e850"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:43:55 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:43:55 2006 -0700"
      },
      "message": "[IPV4] ip_fragment: Always compute hash with ipfrag_lock held.\n\nOtherwise we could compute an inaccurate hash due to the\nrandom seed changing.\n\nNoticed by Zach Brown and patch is based upon some feedback\nfrom Herbert Xu.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "19910d1aec0b2b96ff4b4a93e2aed0d32643e850",
      "tree": "75d76070c55bc6564d27828ad251ac3fce462879",
      "parents": [
        "9b591cbd4e0fc2911d105d88d354124467b2cc08"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Sun Apr 09 22:38:29 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 09 22:38:29 2006 -0700"
      },
      "message": "[NETFILTER]: Fix DNAT in LOCAL_OUT\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7a43c9955178f1cc88374abe1186c0f2ef21e040",
      "tree": "a91b830c5cd11208f2eaf53bc6f3c07d16c81cb2",
      "parents": [
        "96f6bf82ea3abc77d255d5d554df5f349651f6de"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Apr 06 16:16:51 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:43 2006 -0700"
      },
      "message": "[NETFILTER]: H.323 helper: remove changelog\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "96f6bf82ea3abc77d255d5d554df5f349651f6de",
      "tree": "7050071415f6e0ab56ee6d9a51680b30c3876a94",
      "parents": [
        "422c346fad806e2abaeffac686860ebc98dfe33e"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Apr 06 14:19:24 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:42 2006 -0700"
      },
      "message": "[NETFILTER]: Convert conntrack/ipt_REJECT to new checksumming functions\n\nBesides removing lots of duplicate code, all converted users benefit\nfrom improved HW checksum error handling. Tested with and without HW\nchecksums in almost all combinations.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "422c346fad806e2abaeffac686860ebc98dfe33e",
      "tree": "dd554d11e80ad33afef4b438ec4c2d8943ad37f4",
      "parents": [
        "bce8032ef3cc58170ab3550e9e271dba7b4c4764"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Apr 06 14:18:43 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:41 2006 -0700"
      },
      "message": "[NETFILTER]: Add address family specific checksum helpers\n\nAdd checksum operation which takes care of verifying the checksum and\ndealing with HW checksum errors and avoids multiple checksum\noperations by setting ip_summed to CHECKSUM_UNNECESSARY after\nsuccessful verification.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "bce8032ef3cc58170ab3550e9e271dba7b4c4764",
      "tree": "13dbdf12a6c567c3292daad4604eb55f7abd167e",
      "parents": [
        "a0aed49bdb2bbb4234789f241cffb607fd2e213d"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Apr 06 14:18:09 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:40 2006 -0700"
      },
      "message": "[NETFILTER]: Introduce infrastructure for address family specific operations\n\nChange the queue rerouter intrastructure to a generic usable\ninfrastructure for address family specific operations as a base for\nsome cleanups.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a0aed49bdb2bbb4234789f241cffb607fd2e213d",
      "tree": "c1ce0b29ecb38427da529a8a5099be853200db46",
      "parents": [
        "a0b7db5e86d30f470dc1849f4fa44ff77a813091"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Apr 06 14:17:27 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:39 2006 -0700"
      },
      "message": "[NETFILTER]: Fix IP_NF_CONNTRACK_NETLINK dependency\n\nWhen NAT is built as a module, ip_conntrack_netlink can not be linked\nstatically.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a0b7db5e86d30f470dc1849f4fa44ff77a813091",
      "tree": "4b8bc7793dd25b2950b02b7f1576ffde4aa20d17",
      "parents": [
        "51d42f5e4ee43fc98aa0c7a2a104808bb602276f"
      ],
      "author": {
        "name": "Jing Min Zhao",
        "email": "zhaojingmin@users.sourceforge.net",
        "time": "Thu Apr 06 14:15:33 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:38 2006 -0700"
      },
      "message": "[NETFILTER]: H.323 helper: add parameter \u0027default_rrq_ttl\u0027\n\ndefault_rrq_ttl is used when no TTL is included in the RRQ.\n\nSigned-off-by: Jing Min Zhao \u003czhaojingmin@users.sourceforge.net\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "51d42f5e4ee43fc98aa0c7a2a104808bb602276f",
      "tree": "75918387ba3d171765a4a33bb00bd70eaf12f41d",
      "parents": [
        "0f249685fde399c01e51a63f2bdfe4a667db083c"
      ],
      "author": {
        "name": "Jing Min Zhao",
        "email": "zhaojingmin@users.sourceforge.net",
        "time": "Thu Apr 06 14:14:59 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:37 2006 -0700"
      },
      "message": "[NETFILTER]: H.323 helper: make get_h245_addr() static\n\nSigned-off-by: Jing Min Zhao \u003czhaojingmin@users.sourceforge.net\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "0f249685fde399c01e51a63f2bdfe4a667db083c",
      "tree": "87ae04aa3bca0a93506dc1d0f3667abc51f3a4dc",
      "parents": [
        "48bfee5fad0e46f4f18d46285efceba39e897482"
      ],
      "author": {
        "name": "Jing Min Zhao",
        "email": "zhaojingmin@users.sourceforge.net",
        "time": "Thu Apr 06 14:14:11 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:36 2006 -0700"
      },
      "message": "[NETFILTER]: H.323 helper: change EXPORT_SYMBOL to EXPORT_SYMBOL_GPL\n\nSigned-off-by: Jing Min Zhao \u003czhaojingmin@users.sourceforge.net\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "48bfee5fad0e46f4f18d46285efceba39e897482",
      "tree": "f527020c7163d519fdc6fd6d38f9473b6ce739bf",
      "parents": [
        "32292a7ff1d9306841a8da6ea286847b1070cc6a"
      ],
      "author": {
        "name": "Jing Min Zhao",
        "email": "zhaojingmin@users.sourceforge.net",
        "time": "Thu Apr 06 14:13:42 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:35 2006 -0700"
      },
      "message": "[NETFILTER]: H.323 helper: move some function prototypes to ip_conntrack_h323.h\n\nMove prototypes of NAT callbacks to ip_conntrack_h323.h. Because the\nuse of typedefs as arguments, some header files need to be moved as\nwell.\n\nSigned-off-by: Jing Min Zhao \u003czhaojingmin@users.sourceforge.net\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "32292a7ff1d9306841a8da6ea286847b1070cc6a",
      "tree": "e2149c5b4c7bc50a937f95657a2cb1814dea8ddb",
      "parents": [
        "964ddaa10de8f3aeed12bc2a30726514ff309e64"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Apr 06 14:11:30 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:34 2006 -0700"
      },
      "message": "[NETFILTER]: Fix section mismatch warnings\n\nFix section mismatch warnings caused by netfilter\u0027s init_or_cleanup\nfunctions used in many places by splitting the init from the cleanup\nparts.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "964ddaa10de8f3aeed12bc2a30726514ff309e64",
      "tree": "4cda0dcd4d5ec2bf8f06cd4375be4251e96c6a16",
      "parents": [
        "972d1cb1427946f4980240363aac4e73fb375290"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Apr 06 14:09:49 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:33 2006 -0700"
      },
      "message": "[NETFILTER]: Clean up hook registration\n\nClean up hook registration by makeing use of the new mass registration and\nunregistration helpers.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "45af08be6d120690d379cb8421ebaf9d9f86ba52",
      "tree": "5d0105eab9b524e0fa35b3caf9e6c1444e640010",
      "parents": [
        "cdee5751bf91d02616aaf30a5affef56105e3b79"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Wed Apr 05 22:31:19 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:29 2006 -0700"
      },
      "message": "[INET]: Use port unreachable instead of proto for tunnels\n\nThis patch changes GRE and SIT to generate port unreachable instead of\nprotocol unreachable errors when we can\u0027t find a matching tunnel for a\npacket.\n\nThis removes the ambiguity as to whether the error is caused by no\ntunnel being found or by the lack of support for the given tunnel\ntype.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "50fba2aa7cefa6b0e1768cb350c9e69042320c03",
      "tree": "d9d229be1cc489759994e3860e3d2c60e6e6239f",
      "parents": [
        "2e2f7aefa8a8ba4adb6ecee8cbb43fbe9ca4cc89"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Tue Apr 04 13:50:45 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:25 2006 -0700"
      },
      "message": "[INET]: Move no-tunnel ICMP error to tunnel4/tunnel6\n\nThis patch moves the sending of ICMP messages when there are no IPv4/IPv6\ntunnels present to tunnel4/tunnel6 respectively.  Please note that for now\nif xfrm4_tunnel/xfrm6_tunnel is loaded then no ICMP messages will ever be\nsent.  This is similar to how we handle AH/ESP/IPCOMP.\n\nThis move fixes the bug where we always send an ICMP message when there is\nno ip6_tunnel device present for a given packet even if it is later handled\nby IPsec.  It also causes ICMP messages to be sent when no IPIP tunnel is\npresent.\n\nI\u0027ve decided to use the \"port unreachable\" ICMP message over the current\nvalue of \"address unreachable\" (and \"protocol unreachable\" by GRE) because\nit is not ambiguous unlike the other ones which can be triggered by other\nconditions.  There seems to be no standard specifying what value must be\nused so this change should be OK.  In fact we should change GRE to use\nthis value as well.\n\nIncidentally, this patch also fixes a fairly serious bug in xfrm6_tunnel\nwhere we don\u0027t check whether the embedded IPv6 header is present before\ndereferencing it for the inside source address.\n\nThis patch is inspired by a previous patch by Hugo Santos \u003chsantos@av.it.pt\u003e.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2e2f7aefa8a8ba4adb6ecee8cbb43fbe9ca4cc89",
      "tree": "891921c05dbf5ac2436473d77b8dbfda91a1b9bc",
      "parents": [
        "550e29bc96e6f1ced2bca82dace197b009434367"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Apr 04 13:42:35 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:23 2006 -0700"
      },
      "message": "[NETFILTER]: Fix fragmentation issues with bridge netfilter\n\nThe conntrack code doesn\u0027t do re-fragmentation of defragmented packets\nanymore but relies on fragmentation in the IP layer. Purely bridged\npackets don\u0027t pass through the IP layer, so the bridge netfilter code\nneeds to take care of fragmentation itself.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "550e29bc96e6f1ced2bca82dace197b009434367",
      "tree": "423cb5460e1a25eff3d578003252b2de1b8ccaf5",
      "parents": [
        "8bf4b8a1083694d5aac292f92705ddd3aec29be6"
      ],
      "author": {
        "name": "Robert Olsson",
        "email": "robert.olsson@its.uu.se",
        "time": "Tue Apr 04 12:53:35 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:23 2006 -0700"
      },
      "message": "[FIB_TRIE]: Fix leaf freeing.\n\nSeems like leaf (end-nodes) has been freed by __tnode_free_rcu and not\nby __leaf_free_rcu. This fixes the problem. Only tnode_free is now\nused which checks for appropriate node type. free_leaf can be removed.\n\nSigned-off-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "8bf4b8a1083694d5aac292f92705ddd3aec29be6",
      "tree": "a8bbf0bb32b7e286659eae12326c54671430560f",
      "parents": [
        "67644726317a8274be4a3d0ef85b9ccebaa90304"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Tue Apr 04 12:51:05 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Apr 09 22:25:22 2006 -0700"
      },
      "message": "[IPSEC]: Check x-\u003eencap before dereferencing it\n\nWe need to dereference x-\u003eencap before dereferencing it for encap_type.\nIf it\u0027s absent then the encap_type is zero.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2722971cbe831117686039d5c334f2c0f560be13",
      "tree": "b810ea96778e4f5de2a7713685c0551aa34c8f97",
      "parents": [
        "e64a70be5175ac2c209fa742123a6ce845852e0e"
      ],
      "author": {
        "name": "Dmitry Mishin",
        "email": "dim@openvz.org",
        "time": "Sat Apr 01 02:25:19 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 01 02:25:19 2006 -0800"
      },
      "message": "[NETFILTER]: iptables 32bit compat layer\n\nThis patch extends current iptables compatibility layer in order to get\n32bit iptables to work on 64bit kernel. Current layer is insufficient due\nto alignment checks both in kernel and user space tools.\n\nPatch is for current net-2.6.17 with addition of move of ipt_entry_{match|\ntarget} definitions to xt_entry_{match|target}.\n\nSigned-off-by: Dmitry Mishin \u003cdim@openvz.org\u003e\nAcked-off-by: Kirill Korotaev \u003cdev@openvz.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e64a70be5175ac2c209fa742123a6ce845852e0e",
      "tree": "d02293d403fa6d0fdf82a4ea55244f328b37fde4",
      "parents": [
        "bcd1e830a5ac37d708647d492a1436a8a9babb07"
      ],
      "author": {
        "name": "Martin Josefsson",
        "email": "gandalf@wlug.westbo.se",
        "time": "Sat Apr 01 02:24:48 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 01 02:24:48 2006 -0800"
      },
      "message": "[NETFILTER]: {ip,nf}_conntrack_netlink: fix expectation notifier unregistration\n\nThis patch fixes expectation notifier unregistration on module unload to\nuse ip_conntrack_expect_unregister_notifier(). This bug causes a soft\nlockup at the first expectation created after a rmmod ; insmod of this\nmodule.\n\nShould go into -stable as well.\n\nSigned-off-by: Martin Josefsson \u003cgandalf@wlug.westbo.se\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a89ecb6a2ef732d04058d87801e2b6bd7e5c7089",
      "tree": "c84c5b3167c116f0c419a2bbb04877bdac38dd07",
      "parents": [
        "dc5ab2faece3b7473931357db7f63f596678481d"
      ],
      "author": {
        "name": "Yasuyuki Kozakai",
        "email": "yasuyuki.kozakai@toshiba.co.jp",
        "time": "Sat Apr 01 02:22:54 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 01 02:22:54 2006 -0800"
      },
      "message": "[NETFILTER]: x_tables: unify IPv4/IPv6 multiport match\n\nThis unifies ipt_multiport and ip6t_multiport to xt_multiport.\nAs a result, this addes support for inversion and port range match\nto IPv6 packets.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "dc5ab2faece3b7473931357db7f63f596678481d",
      "tree": "d1e5fd3e805e7d2c4136459cca17d5f8ed44bfb6",
      "parents": [
        "9606a21635cec077e1928273751b44ecc824a49d"
      ],
      "author": {
        "name": "Yasuyuki Kozakai",
        "email": "yasuyuki.kozakai@toshiba.co.jp",
        "time": "Sat Apr 01 02:22:30 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 01 02:22:30 2006 -0800"
      },
      "message": "[NETFILTER]: x_tables: unify IPv4/IPv6 esp match\n\nThis unifies ipt_esp and ip6t_esp to xt_esp. Please note that now\na user program needs to specify IPPROTO_ESP as protocol to use esp match\nwith IPv6. This means that ip6tables requires \u0027-p esp\u0027 like iptables.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "dbe5b4aaafc715b12dbbea309d3d17958d01fd65",
      "tree": "936518ad9d5452f5efe18e0107255eab0aafb58d",
      "parents": [
        "e695633e21ffb6a443a8c2f8b3f095c7f1a48eb0"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Sat Apr 01 00:54:16 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 01 00:54:16 2006 -0800"
      },
      "message": "[IPSEC]: Kill unused decap state structure\n\nThis patch removes the *_decap_state structures which were previously\nused to share state between input/post_input.  This is no longer\nneeded.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e695633e21ffb6a443a8c2f8b3f095c7f1a48eb0",
      "tree": "52a679683a11eb42ec5888309a82ec5811a21e03",
      "parents": [
        "15901dc93fa4253bfb3661644ecad67c2e83213c"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Sat Apr 01 00:52:46 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 01 00:52:46 2006 -0800"
      },
      "message": "[IPSEC]: Kill unused decap state argument\n\nThis patch removes the decap_state argument from the xfrm input hook.\nPreviously this function allowed the input hook to share state with\nthe post_input hook.  The latter has since been removed.\n\nThe only purpose for it now is to check the encap type.  However, it\nis easier and better to move the encap type check to the generic\nxfrm_rcv function.  This allows us to get rid of the decap state\nargument altogether.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "65b4b4e81a5094d52cbe372b887b1779abe53f9b",
      "tree": "ef8369e6a8e5278f8f4101132ba85869e5a4ce1d",
      "parents": [
        "c3e5d877aadc073b09c4901f8c1a768de79b0a5d"
      ],
      "author": {
        "name": "Andrew Morton",
        "email": "akpm@osdl.org",
        "time": "Tue Mar 28 16:37:06 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Mar 28 17:02:48 2006 -0800"
      },
      "message": "[NETFILTER]: Rename init functions.\n\nEvery netfilter module uses `init\u0027 for its module_init() function and\n`fini\u0027 or `cleanup\u0027 for its module_exit() function.\n\nProblem is, this creates uninformative initcall_debug output and makes\nctags rather useless.\n\nSo go through and rename them all to $(filename)_init and\n$(filename)_fini.\n\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c3e5d877aadc073b09c4901f8c1a768de79b0a5d",
      "tree": "7338cd13457fa551fdf35579bf60ef6eb630d782",
      "parents": [
        "d2acc3479cbccd5cfbca6c787be713ef1de12ec6"
      ],
      "author": {
        "name": "S P",
        "email": "speattle@yahoo.com",
        "time": "Tue Mar 28 16:35:46 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Mar 28 17:02:47 2006 -0800"
      },
      "message": "[TCP]: Fix RFC2465 typo.\n\nSigned-off-by: S P \u003cspeattle@yahoo.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d2acc3479cbccd5cfbca6c787be713ef1de12ec6",
      "tree": "aa348e19e15027db9abdd2da175a0c9055047858",
      "parents": [
        "f0088a50e7c49d1ba285c88fe06345f223652fd3"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Tue Mar 28 01:12:13 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Mar 28 17:02:46 2006 -0800"
      },
      "message": "[INET]: Introduce tunnel4/tunnel6\n\nBasically this patch moves the generic tunnel protocol stuff out of\nxfrm4_tunnel/xfrm6_tunnel and moves it into the new files of tunnel4.c\nand tunnel6 respectively.\n\nThe reason for this is that the problem that Hugo uncovered is only\nthe tip of the iceberg.  The real problem is that when we removed the\ndependency of ipip on xfrm4_tunnel we didn\u0027t really consider the module\ncase at all.\n\nFor instance, as it is it\u0027s possible to build both ipip and xfrm4_tunnel\nas modules and if the latter is loaded then ipip simply won\u0027t load.\n\nAfter considering the alternatives I\u0027ve decided that the best way out of\nthis is to restore the dependency of ipip on the non-xfrm-specific part\nof xfrm4_tunnel.  This is acceptable IMHO because the intention of the\nremoval was really to be able to use ipip without the xfrm subsystem.\nThis is still preserved by this patch.\n\nSo now both ipip/xfrm4_tunnel depend on the new tunnel4.c which handles\nthe arbitration between the two.  The order of processing is determined\nby a simple integer which ensures that ipip gets processed before\nxfrm4_tunnel.\n\nThe situation for ICMP handling is a little bit more complicated since\nwe may not have enough information to determine who it\u0027s for.  It\u0027s not\na big deal at the moment since the xfrm ICMP handlers are basically\nno-ops.  In future we can deal with this when we look at ICMP caching\nin general.\n\nThe user-visible change to this is the removal of the TUNNEL Kconfig\nprompts.  This makes sense because it can only be used through IPCOMP\nas it stands.\n\nThe addition of the new modules shouldn\u0027t introduce any problems since\nmodule dependency will cause them to be loaded.\n\nOh and I also turned some unnecessary pskb\u0027s in IPv6 related to this\npatch to skb\u0027s.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e041c683412d5bf44dc2b109053e3b837b71742d",
      "tree": "9d271066ef379da0c0fb3b8cb4137abd5d2ebba0",
      "parents": [
        "76b81e2b0e2241accebcc68e126bc5ab958661b9"
      ],
      "author": {
        "name": "Alan Stern",
        "email": "stern@rowland.harvard.edu",
        "time": "Mon Mar 27 01:16:30 2006 -0800"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@g5.osdl.org",
        "time": "Mon Mar 27 08:44:50 2006 -0800"
      },
      "message": "[PATCH] Notifier chain update: API changes\n\nThe kernel\u0027s implementation of notifier chains is unsafe.  There is no\nprotection against entries being added to or removed from a chain while the\nchain is in use.  The issues were discussed in this thread:\n\n    http://marc.theaimsgroup.com/?l\u003dlinux-kernel\u0026m\u003d113018709002036\u0026w\u003d2\n\nWe noticed that notifier chains in the kernel fall into two basic usage\nclasses:\n\n\t\"Blocking\" chains are always called from a process context\n\tand the callout routines are allowed to sleep;\n\n\t\"Atomic\" chains can be called from an atomic context and\n\tthe callout routines are not allowed to sleep.\n\nWe decided to codify this distinction and make it part of the API.  Therefore\nthis set of patches introduces three new, parallel APIs: one for blocking\nnotifiers, one for atomic notifiers, and one for \"raw\" notifiers (which is\nreally just the old API under a new name).  New kinds of data structures are\nused for the heads of the chains, and new routines are defined for\nregistration, unregistration, and calling a chain.  The three APIs are\nexplained in include/linux/notifier.h and their implementation is in\nkernel/sys.c.\n\nWith atomic and blocking chains, the implementation guarantees that the chain\nlinks will not be corrupted and that chain callers will not get messed up by\nentries being added or removed.  For raw chains the implementation provides no\nguarantees at all; users of this API must provide their own protections.  (The\nidea was that situations may come up where the assumptions of the atomic and\nblocking APIs are not appropriate, so it should be possible for users to\nhandle these things in their own way.)\n\nThere are some limitations, which should not be too hard to live with.  For\natomic/blocking chains, registration and unregistration must always be done in\na process context since the chain is protected by a mutex/rwsem.  Also, a\ncallout routine for a non-raw chain must not try to register or unregister\nentries on its own chain.  (This did happen in a couple of places and the code\nhad to be changed to avoid it.)\n\nSince atomic chains may be called from within an NMI handler, they cannot use\nspinlocks for synchronization.  Instead we use RCU.  The overhead falls almost\nentirely in the unregister routine, which is okay since unregistration is much\nless frequent that calling a chain.\n\nHere is the list of chains that we adjusted and their classifications.  None\nof them use the raw API, so for the moment it is only a placeholder.\n\n  ATOMIC CHAINS\n  -------------\narch/i386/kernel/traps.c:\t\ti386die_chain\narch/ia64/kernel/traps.c:\t\tia64die_chain\narch/powerpc/kernel/traps.c:\t\tpowerpc_die_chain\narch/sparc64/kernel/traps.c:\t\tsparc64die_chain\narch/x86_64/kernel/traps.c:\t\tdie_chain\ndrivers/char/ipmi/ipmi_si_intf.c:\txaction_notifier_list\nkernel/panic.c:\t\t\t\tpanic_notifier_list\nkernel/profile.c:\t\t\ttask_free_notifier\nnet/bluetooth/hci_core.c:\t\thci_notifier\nnet/ipv4/netfilter/ip_conntrack_core.c:\tip_conntrack_chain\nnet/ipv4/netfilter/ip_conntrack_core.c:\tip_conntrack_expect_chain\nnet/ipv6/addrconf.c:\t\t\tinet6addr_chain\nnet/netfilter/nf_conntrack_core.c:\tnf_conntrack_chain\nnet/netfilter/nf_conntrack_core.c:\tnf_conntrack_expect_chain\nnet/netlink/af_netlink.c:\t\tnetlink_chain\n\n  BLOCKING CHAINS\n  ---------------\narch/powerpc/platforms/pseries/reconfig.c:\tpSeries_reconfig_chain\narch/s390/kernel/process.c:\t\tidle_chain\narch/x86_64/kernel/process.c\t\tidle_notifier\ndrivers/base/memory.c:\t\t\tmemory_chain\ndrivers/cpufreq/cpufreq.c\t\tcpufreq_policy_notifier_list\ndrivers/cpufreq/cpufreq.c\t\tcpufreq_transition_notifier_list\ndrivers/macintosh/adb.c:\t\tadb_client_list\ndrivers/macintosh/via-pmu.c\t\tsleep_notifier_list\ndrivers/macintosh/via-pmu68k.c\t\tsleep_notifier_list\ndrivers/macintosh/windfarm_core.c\twf_client_list\ndrivers/usb/core/notify.c\t\tusb_notifier_list\ndrivers/video/fbmem.c\t\t\tfb_notifier_list\nkernel/cpu.c\t\t\t\tcpu_chain\nkernel/module.c\t\t\t\tmodule_notify_list\nkernel/profile.c\t\t\tmunmap_notifier\nkernel/profile.c\t\t\ttask_exit_notifier\nkernel/sys.c\t\t\t\treboot_notifier_list\nnet/core/dev.c\t\t\t\tnetdev_chain\nnet/decnet/dn_dev.c:\t\t\tdnaddr_chain\nnet/ipv4/devinet.c:\t\t\tinetaddr_chain\n\nIt\u0027s possible that some of these classifications are wrong.  If they are,\nplease let us know or submit a patch to fix them.  Note that any chain that\ngets called very frequently should be atomic, because the rwsem read-locking\nused for blocking chains is very likely to incur cache misses on SMP systems.\n(However, if the chain\u0027s callout routines may sleep then the chain cannot be\natomic.)\n\nThe patch set was written by Alan Stern and Chandra Seetharaman, incorporating\nmaterial written by Keith Owens and suggestions from Paul McKenney and Andrew\nMorton.\n\n[jes@sgi.com: restructure the notifier chain initialization macros]\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nSigned-off-by: Chandra Seetharaman \u003csekharan@us.ibm.com\u003e\nSigned-off-by: Jes Sorensen \u003cjes@sgi.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n"
    },
    {
      "commit": "14cc3e2b633bb64063698980974df4535368e98f",
      "tree": "d542c9db7376de199d640b8e34d5630460b217b5",
      "parents": [
        "353ab6e97b8f209dbecc9f650f1f84e3da2a7bb1"
      ],
      "author": {
        "name": "Ingo Molnar",
        "email": "mingo@elte.hu",
        "time": "Sun Mar 26 01:37:14 2006 -0800"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@g5.osdl.org",
        "time": "Sun Mar 26 08:56:55 2006 -0800"
      },
      "message": "[PATCH] sem2mutex: misc static one-file mutexes\n\nSemaphore to mutex conversion.\n\nThe conversion was generated via scripts, and the result was validated\nautomatically via a script as well.\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nCc: Dave Jones \u003cdavej@codemonkey.org.uk\u003e\nCc: Paul Mackerras \u003cpaulus@samba.org\u003e\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nCc: Jens Axboe \u003caxboe@suse.de\u003e\nCc: Neil Brown \u003cneilb@cse.unsw.edu.au\u003e\nAcked-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nCc: Greg KH \u003cgreg@kroah.com\u003e\nCc: Dominik Brodowski \u003clinux@dominikbrodowski.net\u003e\nCc: Adam Belay \u003cambx1@neo.rr.com\u003e\nCc: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n"
    },
    {
      "commit": "b55813a2e50088ca30df33fa62aeed5d3adb1796",
      "tree": "be50fe404e94869fe854766e190a5753dbc7dd49",
      "parents": [
        "368d17e068f691dba5a4f122c271db5ec9b2ebd6",
        "9e19bb6d7a0959f5028d46e1ab99c50f0d36eda8"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@g5.osdl.org",
        "time": "Sat Mar 25 08:39:20 2006 -0800"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@g5.osdl.org",
        "time": "Sat Mar 25 08:39:20 2006 -0800"
      },
      "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\n* master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6:\n  [NETFILTER] x_table.c: sem2mutex\n  [IPV4]: Aggregate route entries with different TOS values\n  [TCP]: Mark tcp_*mem[] __read_mostly.\n  [TCP]: Set default max buffers from memory pool size\n  [SCTP]: Fix up sctp_rcv return value\n  [NET]: Take RTNL when unregistering notifier\n  [WIRELESS]: Fix config dependencies.\n  [NET]: Fill in a 32-bit hole in struct sock on 64-bit platforms.\n  [NET]: Ensure device name passed to SO_BINDTODEVICE is NULL terminated.\n  [MODULES]: Don\u0027t allow statically declared exports\n  [BRIDGE]: Unaligned accesses in the ethernet bridge\n"
    },
    {
      "commit": "f348d70a324e15afc701a494f32ec468abb7d1eb",
      "tree": "a4cb43429f7f08a6621c581bd99e4a03198e8c67",
      "parents": [
        "501f2499b897ca4be68b1acc7a4bc8cf66f5fd24"
      ],
      "author": {
        "name": "Davide Libenzi",
        "email": "davidel@xmailserver.org",
        "time": "Sat Mar 25 03:07:39 2006 -0800"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@g5.osdl.org",
        "time": "Sat Mar 25 08:22:56 2006 -0800"
      },
      "message": "[PATCH] POLLRDHUP/EPOLLRDHUP handling for half-closed devices notifications\n\nImplement the half-closed devices notifiation, by adding a new POLLRDHUP\n(and its alias EPOLLRDHUP) bit to the existing poll/select sets.  Since the\nexisting POLLHUP handling, that does not report correctly half-closed\ndevices, was feared to be changed, this implementation leaves the current\nPOLLHUP reporting unchanged and simply add a new bit that is set in the few\nplaces where it makes sense.  The same thing was discussed and conceptually\nagreed quite some time ago:\n\nhttp://lkml.org/lkml/2003/7/12/116\n\nSince this new event bit is added to the existing Linux poll infrastruture,\neven the existing poll/select system calls will be able to use it.  As far\nas the existing POLLHUP handling, the patch leaves it as is.  The\npollrdhup-2.6.16.rc5-0.10.diff defines the POLLRDHUP for all the existing\narchs and sets the bit in the six relevant files.  The other attached diff\nis the simple change required to sys/epoll.h to add the EPOLLRDHUP\ndefinition.\n\nThere is \"a stupid program\" to test POLLRDHUP delivery here:\n\n http://www.xmailserver.org/pollrdhup-test.c\n\nIt tests poll(2), but since the delivery is same epoll(2) will work equally.\n\nSigned-off-by: Davide Libenzi \u003cdavidel@xmailserver.org\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: Michael Kerrisk \u003cmtk-manpages@gmx.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n"
    },
    {
      "commit": "cef2685e0053945ea0f3c02297386b040f486ea7",
      "tree": "869c11f64c5e2259342c228c80e93cbbbf8e4fc1",
      "parents": [
        "b8059eadf9f4dc24bd72da71daa832a9a9899fb4"
      ],
      "author": {
        "name": "Ilia Sotnikov",
        "email": "hostcc@gmail.com",
        "time": "Sat Mar 25 01:38:55 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Mar 25 01:38:55 2006 -0800"
      },
      "message": "[IPV4]: Aggregate route entries with different TOS values\n\nWhen we get an ICMP need-to-frag message, the original TOS value in the\nICMP payload cannot be used as a key to look up the routes to update.\nThis is because the TOS field may have been modified by routers on the\nway.  Similarly, ip_rt_redirect should also ignore the TOS as the router\nthat gave us the message may have modified the TOS value.\n\nThe patch achieves this objective by aggregating entries with different\nTOS values (but are otherwise identical) into the same bucket.  This\nmakes it easy to update them at the same time when an ICMP message is\nreceived.\n\nIn future we should use a twin-hashing scheme where teh aggregation\noccurs at the entry level.  That is, the TOS goes back into the hash\nfor normal lookups while ICMP lookups will end up with a node that\ngives us a list that contains all other route entries that differ\nonly by TOS.\n\nSigned-off-by: Ilia Sotnikov \u003chostcc@gmail.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b8059eadf9f4dc24bd72da71daa832a9a9899fb4",
      "tree": "14ce03cd0b322ba35a600d13930a440aafda6f8d",
      "parents": [
        "7b4f4b5ebceab67ce440a61081a69f0265e17c2a"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Mar 25 01:36:56 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Mar 25 01:36:56 2006 -0800"
      },
      "message": "[TCP]: Mark tcp_*mem[] __read_mostly.\n\nSuggested by Stephen Hemminger.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7b4f4b5ebceab67ce440a61081a69f0265e17c2a",
      "tree": "ac02c685ce23f2440fecbebaa5b55cd47947c03e",
      "parents": [
        "2babf9daae4a3561f3264638a22ac7d0b14a6f52"
      ],
      "author": {
        "name": "John Heffner",
        "email": "jheffner@psc.edu",
        "time": "Sat Mar 25 01:34:07 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Mar 25 01:34:07 2006 -0800"
      },
      "message": "[TCP]: Set default max buffers from memory pool size\n\nThis patch sets the maximum TCP buffer sizes (available to automatic\nbuffer tuning, not to setsockopt) based on the TCP memory pool size.\nThe maximum sndbuf and rcvbuf each will be up to 4 MB, but no more\nthan 1/128 of the memory pressure threshold.\n\nSigned-off-by: John Heffner \u003cjheffner@psc.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "53b3531bbbf70ac7551b32d1acc229d94de52658",
      "tree": "644440c93f599bbf64bb0b703c97b03b4dc5d737",
      "parents": [
        "29afd49b72a9b2c26fa8c678bcf3976d0540446b"
      ],
      "author": {
        "name": "Alexey Dobriyan",
        "email": "adobriyan@gmail.com",
        "time": "Fri Mar 24 03:16:13 2006 -0800"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@g5.osdl.org",
        "time": "Fri Mar 24 07:33:24 2006 -0800"
      },
      "message": "[PATCH] s/;;/;/g\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n"
    },
    {
      "commit": "a5cdc030030ef5a16e48aebeb65067bdc3120899",
      "tree": "36524250e8564ae4e7f891662dace65fdacff521",
      "parents": [
        "5e2e71141ca93a3e2543966ced6a6077d4fb8fd8"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Mar 23 01:16:06 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Mar 23 01:16:06 2006 -0800"
      },
      "message": "[IPV4]: Add fib rule netlink notifications\n\nTo really make sense of route notifications in the presence of\nmultiple tables, userspace also needs to be notified about routing\nrule updates.  Notifications are sent to the so far unused\nRTNLGRP_NOP1 (now RTNLGRP_RULE) group.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "1a55d57b107c3e06935763905dc0fb235214569d",
      "tree": "5d894dbda60fa2e998dda4912e6e0a50f769709d",
      "parents": [
        "6a534ee35cfd02f60e99d301b9ac446ea11a9cfd"
      ],
      "author": {
        "name": "Alexey Kuznetsov",
        "email": "kuznet@ms2.inr.ac.ru",
        "time": "Wed Mar 22 14:27:59 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Mar 22 14:27:59 2006 -0800"
      },
      "message": "[TCP]: Do not use inet-\u003eid of global tcp_socket when sending RST.\n\nThe problem is in ip_push_pending_frames(), which uses:\n\n        if (!df) {\n                __ip_select_ident(iph, \u0026rt-\u003eu.dst, 0);\n        } else {\n                iph-\u003eid \u003d htons(inet-\u003eid++);\n        }\n\ninstead of ip_select_ident().\n\nRight now I think the code is a nonsense. Most likely, I copied it from\nold ip_build_xmit(), where it was really special, we had to decide\nwhether to generate unique ID when generating the first (well, the last)\nfragment.\n\nIn ip_push_pending_frames() it does not make sense, it should use plain\nip_select_ident() instead.\n\nSigned-off-by: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6a534ee35cfd02f60e99d301b9ac446ea11a9cfd",
      "tree": "c6bbb8b91bdadd5fb4a9e93df47a36213674b3a1",
      "parents": [
        "1e30a014e311e627b91489ff5ec1b54496d308af"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Wed Mar 22 13:57:25 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Mar 22 13:57:25 2006 -0800"
      },
      "message": "[NETFILTER]: Fix undefined references to get_h225_addr\n\nget_h225_addr is exported, but declared static, which fails when\nlinking statically.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b9f78f9fca626875af8adc0f7366a38b8e625a0e",
      "tree": "1087c6f6a6cc39e4e55c2a02f93d93da67a68ed3",
      "parents": [
        "a45049c51ce6a3fecf2a909b591b28164c927112"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Wed Mar 22 13:56:08 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Mar 22 13:56:08 2006 -0800"
      },
      "message": "[NETFILTER]: nf_conntrack: support for layer 3 protocol load on demand\n\nx_tables matches and targets that require nf_conntrack_ipv[4|6] to work\ndon\u0027t have enough information to load on demand these modules. This\npatch introduces the following changes to solve this issue:\n\no nf_ct_l3proto_try_module_get: try to load the layer 3 connection\ntracker module and increases the refcount.\no nf_ct_l3proto_module put: drop the refcount of the module.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a45049c51ce6a3fecf2a909b591b28164c927112",
      "tree": "582c35205f9c1c12825447a009518eb2116beacd",
      "parents": [
        "4e3882f77376e036a52b022909d7e910714bd27b"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Wed Mar 22 13:55:40 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Mar 22 13:55:40 2006 -0800"
      },
      "message": "[NETFILTER]: x_tables: set the protocol family in x_tables targets/matches\n\nSet the family field in xt_[matches|targets] registered.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4e3882f77376e036a52b022909d7e910714bd27b",
      "tree": "ede6f69b055586450d50e9ec1ba99d35937f2233",
      "parents": [
        "f0d835835ba30686dc085e98c8eeac0b9c26e3b2"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Wed Mar 22 13:55:11 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Mar 22 13:55:11 2006 -0800"
      },
      "message": "[NETFILTER]: conntrack: cleanup the conntrack ID initialization\n\nCurrently the first conntrack ID assigned is 2, use 1 instead.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "1cde64365b0c4f576f8f45b834e6a6de081b5914",
      "tree": "86f35fc9f292365c87b7ff90e0933e9d38db2863",
      "parents": [
        "50b521aa54f415a626bfd63d1a9b72120e9fbe88"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Wed Mar 22 13:54:15 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Mar 22 13:54:15 2006 -0800"
      },
      "message": "[NETFILTER]: ctnetlink: Fix expectaction mask dumping\n\nThe expectation mask has some particularities that requires a different\nhandling. The protocol number fields can be set to non-valid protocols,\nie. l3num is set to 0xFFFF. Since that protocol does not exist, the mask\ntuple will not be dumped. Moreover, this results in a kernel panic when\nnf_conntrack accesses the array of protocol handlers, that is PF_MAX (0x1F)\nlong.\n\nThis patch introduces the function ctnetlink_exp_dump_mask, that correctly\ndumps the expectation mask. Such function uses the l3num value from the\nexpectation tuple that is a valid layer 3 protocol number. The value of the\nl3num mask isn\u0027t dumped since it is meaningless from the userspace side.\n\nThanks to Yasuyuki Kozakai and Patrick McHardy for the feedback.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5e35941d990123f155b02d5663e51a24f816b6f3",
      "tree": "90499f3247e64210213d7b4da936f739d7a9711c",
      "parents": [
        "30ca3e376e82cc44488b1d377adfb10b5818548e"
      ],
      "author": {
        "name": "Jing Min Zhao",
        "email": "zhaojignmin@hotmail.com",
        "time": "Mon Mar 20 23:41:17 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 23:41:17 2006 -0800"
      },
      "message": "[NETFILTER]: Add H.323 conntrack/NAT helper\n\nSigned-off-by: Jing Min Zhao \u003czhaojignmin@hotmail.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "dbeff12b4d2fd5943f6f03f7ed9a3ca486577bb0",
      "tree": "bf06c5a2bb2ac353f9ff4f1959a6165bfb24e8f0",
      "parents": [
        "8ca0d17bd716c0aa3f496714e0e304fc6b982ae3"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:52:32 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:52:32 2006 -0800"
      },
      "message": "[INET]: Fix typo in Arnaldo\u0027s connection sock compat fixups.\n\n\"struct inet_csk\" --\u003e \"struct inet_connection_sock\" :-)\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "543d9cfeec4d58ad3fd974db5531b06b6b95deb4",
      "tree": "b5f79a92ec01b4a97f26d48cae11566498641822",
      "parents": [
        "f94691acf9df35d5cd828373e35391bdc4a3fde6"
      ],
      "author": {
        "name": "Arnaldo Carvalho de Melo",
        "email": "acme@mandriva.com",
        "time": "Mon Mar 20 22:48:35 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:48:35 2006 -0800"
      },
      "message": "[NET]: Identation \u0026 other cleanups related to compat_[gs]etsockopt cset\n\nNo code changes, just tidying up, in some cases moving EXPORT_SYMBOLs\nto just after the function exported, etc.\n\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@mandriva.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "dec73ff0293d59076d1fd8f4a264898ecfc457ec",
      "tree": "251a87b4b98d073fcd3753e01eea5ea44aaf9570",
      "parents": [
        "d1d47beef8ecaeedc368f00780d02cfa5e540005"
      ],
      "author": {
        "name": "Arnaldo Carvalho de Melo",
        "email": "acme@mandriva.com",
        "time": "Mon Mar 20 22:46:16 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:46:16 2006 -0800"
      },
      "message": "[ICSK] compat: Introduce inet_csk_compat_[gs]etsockopt\n\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@mandriva.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3fdadf7d27e3fbcf72930941884387d1f4936f04",
      "tree": "167072cf1e60b6b307610563614b435ff0caa52d",
      "parents": [
        "c750360938b403e6cc193d293cfbcb099dd6c60e"
      ],
      "author": {
        "name": "Dmitry Mishin",
        "email": "dim@openvz.org",
        "time": "Mon Mar 20 22:45:21 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:45:21 2006 -0800"
      },
      "message": "[NET]: {get|set}sockopt compatibility layer\n\nThis patch extends {get|set}sockopt compatibility layer in order to\nmove protocol specific parts to their place and avoid huge universal\nnet/compat.c file in the future.\n\nSigned-off-by: Dmitry Mishin \u003cdim@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2c7946a7bf45ae86736ab3b43d0085e43947945c",
      "tree": "b956f301033ebaefe8d2701b257edfd947f537f3",
      "parents": [
        "be33690d8fcf40377f16193c463681170eb6b295"
      ],
      "author": {
        "name": "Catherine Zhang",
        "email": "cxzhang@watson.ibm.com",
        "time": "Mon Mar 20 22:41:23 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:41:23 2006 -0800"
      },
      "message": "[SECURITY]: TCP/UDP getpeersec\n\nThis patch implements an application of the LSM-IPSec networking\ncontrols whereby an application can determine the label of the\nsecurity association its TCP or UDP sockets are currently connected to\nvia getsockopt and the auxiliary data mechanism of recvmsg.\n\nPatch purpose:\n\nThis patch enables a security-aware application to retrieve the\nsecurity context of an IPSec security association a particular TCP or\nUDP socket is using.  The application can then use this security\ncontext to determine the security context for processing on behalf of\nthe peer at the other end of this connection.  In the case of UDP, the\nsecurity context is for each individual packet.  An example\napplication is the inetd daemon, which could be modified to start\ndaemons running at security contexts dependent on the remote client.\n\nPatch design approach:\n\n- Design for TCP\nThe patch enables the SELinux LSM to set the peer security context for\na socket based on the security context of the IPSec security\nassociation.  The application may retrieve this context using\ngetsockopt.  When called, the kernel determines if the socket is a\nconnected (TCP_ESTABLISHED) TCP socket and, if so, uses the dst_entry\ncache on the socket to retrieve the security associations.  If a\nsecurity association has a security context, the context string is\nreturned, as for UNIX domain sockets.\n\n- Design for UDP\nUnlike TCP, UDP is connectionless.  This requires a somewhat different\nAPI to retrieve the peer security context.  With TCP, the peer\nsecurity context stays the same throughout the connection, thus it can\nbe retrieved at any time between when the connection is established\nand when it is torn down.  With UDP, each read/write can have\ndifferent peer and thus the security context might change every time.\nAs a result the security context retrieval must be done TOGETHER with\nthe packet retrieval.\n\nThe solution is to build upon the existing Unix domain socket API for\nretrieving user credentials.  Linux offers the API for obtaining user\ncredentials via ancillary messages (i.e., out of band/control messages\nthat are bundled together with a normal message).\n\nPatch implementation details:\n\n- Implementation for TCP\nThe security context can be retrieved by applications using getsockopt\nwith the existing SO_PEERSEC flag.  As an example (ignoring error\nchecking):\n\ngetsockopt(sockfd, SOL_SOCKET, SO_PEERSEC, optbuf, \u0026optlen);\nprintf(\"Socket peer context is: %s\\n\", optbuf);\n\nThe SELinux function, selinux_socket_getpeersec, is extended to check\nfor labeled security associations for connected (TCP_ESTABLISHED \u003d\u003d\nsk-\u003esk_state) TCP sockets only.  If so, the socket has a dst_cache of\nstruct dst_entry values that may refer to security associations.  If\nthese have security associations with security contexts, the security\ncontext is returned.\n\ngetsockopt returns a buffer that contains a security context string or\nthe buffer is unmodified.\n\n- Implementation for UDP\nTo retrieve the security context, the application first indicates to\nthe kernel such desire by setting the IP_PASSSEC option via\ngetsockopt.  Then the application retrieves the security context using\nthe auxiliary data mechanism.\n\nAn example server application for UDP should look like this:\n\ntoggle \u003d 1;\ntoggle_len \u003d sizeof(toggle);\n\nsetsockopt(sockfd, SOL_IP, IP_PASSSEC, \u0026toggle, \u0026toggle_len);\nrecvmsg(sockfd, \u0026msg_hdr, 0);\nif (msg_hdr.msg_controllen \u003e sizeof(struct cmsghdr)) {\n    cmsg_hdr \u003d CMSG_FIRSTHDR(\u0026msg_hdr);\n    if (cmsg_hdr-\u003ecmsg_len \u003c\u003d CMSG_LEN(sizeof(scontext)) \u0026\u0026\n        cmsg_hdr-\u003ecmsg_level \u003d\u003d SOL_IP \u0026\u0026\n        cmsg_hdr-\u003ecmsg_type \u003d\u003d SCM_SECURITY) {\n        memcpy(\u0026scontext, CMSG_DATA(cmsg_hdr), sizeof(scontext));\n    }\n}\n\nip_setsockopt is enhanced with a new socket option IP_PASSSEC to allow\na server socket to receive security context of the peer.  A new\nancillary message type SCM_SECURITY.\n\nWhen the packet is received we get the security context from the\nsec_path pointer which is contained in the sk_buff, and copy it to the\nancillary message space.  An additional LSM hook,\nselinux_socket_getpeersec_udp, is defined to retrieve the security\ncontext from the SELinux space.  The existing function,\nselinux_socket_getpeersec does not suit our purpose, because the\nsecurity context is copied directly to user space, rather than to\nkernel space.\n\nTesting:\n\nWe have tested the patch by setting up TCP and UDP connections between\napplications on two machines using the IPSec policies that result in\nlabeled security associations being built.  For TCP, we can then\nextract the peer security context using getsockopt on either end.  For\nUDP, the receiving end can retrieve the security context using the\nauxiliary data mechanism of recvmsg.\n\nSigned-off-by: Catherine Zhang \u003ccxzhang@watson.ibm.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "15d99e02babae8bc20b836917ace07d93e318149",
      "tree": "6a8941a3ef45f831161730aeee4a2fcc18cca78a",
      "parents": [
        "c1b1bce8527c2c3cac7e2520ca54b7c04281033e"
      ],
      "author": {
        "name": "Rick Jones",
        "email": "rick.jones2@hp.com",
        "time": "Mon Mar 20 22:40:29 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:40:29 2006 -0800"
      },
      "message": "[TCP]: sysctl to allow TCP window \u003e 32767 sans wscale\n\nBack in the dark ages, we had to be conservative and only allow 15-bit\nwindow fields if the window scale option was not negotiated.  Some\nancient stacks used a signed 16-bit quantity for the window field of\nthe TCP header and would get confused.\n\nThose days are long gone, so we can use the full 16-bits by default\nnow.\n\nThere is a sysctl added so that we can still interact with such old\nstacks\n\nSigned-off-by: Rick Jones \u003crick.jones2@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "abd596a4b68b6526c2676233e10602dd9660e9d7",
      "tree": "4122bd7fc36c18ffb762ea8ae6d5c794c1924222",
      "parents": [
        "59f1741e541bf4f6139599389610a70de49c3ad2"
      ],
      "author": {
        "name": "Neil Horman",
        "email": "nhorman@tuxdriver.com",
        "time": "Mon Mar 20 22:39:47 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:39:47 2006 -0800"
      },
      "message": "[IPV4] ARP: Alloc acceptance of unsolicited ARP via netdevice sysctl.\n\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "edb2c34fb2683ff21c8a6bcc3e41c07a53601761",
      "tree": "aae0b87f2377f4134ee38017f8c9041d1247e730",
      "parents": [
        "fb9504964d32f69e4381dc8895eeb8e81a32af72"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:36:21 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:36:21 2006 -0800"
      },
      "message": "[NETFILTER]: Fix warnings in ip_nat_snmp_basic.c\n\nnet/ipv4/netfilter/ip_nat_snmp_basic.c: In function \u0027asn1_header_decode\u0027:\nnet/ipv4/netfilter/ip_nat_snmp_basic.c:248: warning: \u0027len\u0027 may be used uninitialized in this function\nnet/ipv4/netfilter/ip_nat_snmp_basic.c:248: warning: \u0027def\u0027 may be used uninitialized in this function\nnet/ipv4/netfilter/ip_nat_snmp_basic.c: In function \u0027snmp_translate\u0027:\nnet/ipv4/netfilter/ip_nat_snmp_basic.c:672: warning: \u0027l\u0027 may be used uninitialized in this function\nnet/ipv4/netfilter/ip_nat_snmp_basic.c:668: warning: \u0027type\u0027 may be used uninitialized in this function\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "57b47a53ec4a67691ba32cff5768e8d78fa6c67f",
      "tree": "d735ae4734f7b386eefa508a0629715f45808d1d",
      "parents": [
        "6613f82dd293b23f582a649b287fadbf8d23e6cf"
      ],
      "author": {
        "name": "Ingo Molnar",
        "email": "mingo@elte.hu",
        "time": "Mon Mar 20 22:35:41 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:35:41 2006 -0800"
      },
      "message": "[NET]: sem2mutex part 2\n\nSemaphore to mutex conversion.\n\nThe conversion was generated via scripts, and the result was validated\nautomatically via a script as well.\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4a3e2f711a00a1feb72ae12fdc749da10179d185",
      "tree": "76ced9d3270dea4b864da71fa1d4415d2e3c8b11",
      "parents": [
        "d4ccd08cdfa8d34f4d25b62041343c52fc79385f"
      ],
      "author": {
        "name": "Arjan van de Ven",
        "email": "arjan@infradead.org",
        "time": "Mon Mar 20 22:33:17 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:33:17 2006 -0800"
      },
      "message": "[NET] sem2mutex: net/\n\nSemaphore to mutex conversion.\n\nThe conversion was generated via scripts, and the result was validated\nautomatically via a script as well.\n\nSigned-off-by: Arjan van de Ven \u003carjan@infradead.org\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "153330618691694af64f39fb56c9de051862380e",
      "tree": "45ccb622bf0d13f6a0a663ba8af39f9dc2c9122e",
      "parents": [
        "2d0817d11eaec57435feb61493331a763f732a2b"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@osdl.org",
        "time": "Mon Mar 20 22:32:28 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:32:28 2006 -0800"
      },
      "message": "[NET]: dev_put/dev_hold cleanup\n\nGet rid of the old __dev_put macro that is just a hold over from pre 2.6\nkernel.  And turn dev_hold into an inline instead of a macro.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@osdl.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6756ae4b4e97aba48c042b4aa6b77a18f507d2cb",
      "tree": "05bf37711d782fb0089d474716026c44a454f89b",
      "parents": [
        "253aa11578c1b89757282430891bb66ae5300092"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@osdl.org",
        "time": "Mon Mar 20 22:23:58 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:23:58 2006 -0800"
      },
      "message": "[NET]: Convert RTNL to mutex.\n\nThis patch turns the RTNL from a semaphore to a new 2.6.16 mutex and\ngets rid of some of the leftover legacy.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@osdl.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "50bf3e224a2963c6dd5098f77bd7233222ebfbd2",
      "tree": "6429bcfa043d34db73ef1bdb48243726e33f8132",
      "parents": [
        "0bc6d90b82775113bbbe371f5d9fcffefa5fa94d"
      ],
      "author": {
        "name": "Baruch Even",
        "email": "baruch@ev-en.org",
        "time": "Mon Mar 20 22:23:10 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:23:10 2006 -0800"
      },
      "message": "[TCP] H-TCP: Better time accounting\n\nInstead of estimating the time since the last congestion event, count\nit directly.\n\nSigned-off-by: Baruch Even \u003cbaruch@ev-en.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "0bc6d90b82775113bbbe371f5d9fcffefa5fa94d",
      "tree": "5597a249a1ad015c226f2c94192de5efec9092d3",
      "parents": [
        "c33ad6e476e4cdc245215f3eb5b3df353df1b370"
      ],
      "author": {
        "name": "Baruch Even",
        "email": "baruch@ev-en.org",
        "time": "Mon Mar 20 22:22:47 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:22:47 2006 -0800"
      },
      "message": "[TCP] H-TCP: Account for delayed-ACKs\n\nAccount for delayed-ACKs in H-TCP.\n\nDelayed-ACKs cause H-TCP to be less aggressive than its design calls\nfor. It is especially true when the receiver is a Linux machine where\nthe average delayed ack is over 3 packets with values of 7 not unheard\nof.\n\nSigned-off-By: Baruch Even \u003cbaruch@ev-en.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c33ad6e476e4cdc245215f3eb5b3df353df1b370",
      "tree": "b19831b1630b5963a897ae655027c6d7acdd2895",
      "parents": [
        "b191ba0d599928372be5a89f75486eb58efab48a"
      ],
      "author": {
        "name": "Baruch Even",
        "email": "baruch@ev-en.org",
        "time": "Mon Mar 20 22:22:20 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:22:20 2006 -0800"
      },
      "message": "[TCP] H-TCP: Use msecs_to_jiffies\n\nUse functions to calculate jiffies from milliseconds and not the old,\ncrude method of dividing HZ by a value. Ensures more accurate values\neven in the face of strange HZ values.\n\nSigned-off-By: Baruch Even \u003cbaruch@ev-en.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c4d9390941aee136fd35bb38eb1d6de4e3b1487d",
      "tree": "fcaf0032ba5971145b5f527b8635cd7aa3a39d8c",
      "parents": [
        "72478873571d869906f7a250b09e12fa5b65e321"
      ],
      "author": {
        "name": "Arnaldo Carvalho de Melo",
        "email": "acme@mandriva.com",
        "time": "Mon Mar 20 22:01:03 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 22:01:03 2006 -0800"
      },
      "message": "[ICSK]: Introduce inet_csk_ctl_sock_create\n\nConsolidating open coded sequences in tcp and dccp, v4 and v6.\n\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@mandriva.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "06ef921d60bbf6f765d1b9492fb4fc88ac7814bd",
      "tree": "c59cb40d0f28621e782b1938ea0bfa5d6720c75a",
      "parents": [
        "5ddf0eb2bfd613e941dd8748870c71da2e5ad409"
      ],
      "author": {
        "name": "Robert Olsson",
        "email": "robert.olsson@its.uu.se",
        "time": "Mon Mar 20 21:35:01 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 21:35:01 2006 -0800"
      },
      "message": "[IPV4]: fib_trie stats fix\n\nfib_triestats has been buggy and caused oopses some platforms as\nopenwrt.  The patch below should cure those problems.\n\nSigned-off-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5ddf0eb2bfd613e941dd8748870c71da2e5ad409",
      "tree": "54591328f3ffcaef3b91be801be3e621b99e8463",
      "parents": [
        "4f81c32b028aecd818634b1ef36aae3b2b3e66ce"
      ],
      "author": {
        "name": "Robert Olsson",
        "email": "robert.olsson@its.uu.se",
        "time": "Mon Mar 20 21:34:12 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 21:34:12 2006 -0800"
      },
      "message": "[IPV4]: fib_trie initialzation fix\n\nIn some kernel configs /proc functions seems to be accessed before the\ntrie is initialized. The patch below checks for this.\n\nSigned-off-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "0e7b13685f9a06949ea3070c97c0f0085a08cd37",
      "tree": "3ba0a11d61dc2dd64d7a93bb5cd70d58a46fec39",
      "parents": [
        "1d541ddd74802cfa0eb8a3864668851f6cd79bdf"
      ],
      "author": {
        "name": "John Heffner",
        "email": "jheffner@psc.edu",
        "time": "Mon Mar 20 21:32:58 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 21:32:58 2006 -0800"
      },
      "message": "[TCP] mtu probing: move tcp-specific data out of inet_connection_sock\n\nThis moves some TCP-specific MTU probing state out of\ninet_connection_sock back to tcp_sock.\n\nSigned-off-by: John Heffner \u003cjheffner@psc.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a193a4abdd1f742a57f3f70b6a83c3e536876e97",
      "tree": "1b77f9f388ae153815248e8ef30b0297943c7016",
      "parents": [
        "6ffd30fbbb1b4a01a9f56049521693375a864d3e"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 19:23:05 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 19:23:05 2006 -0800"
      },
      "message": "[NETFILTER]: Fix skb-\u003enf_bridge lifetime issues\n\nThe bridge netfilter code simulates the NF_IP_PRE_ROUTING hook and skips\nthe real hook by registering with high priority and returning NF_STOP if\nskb-\u003enf_bridge is present and the BRNF_NF_BRIDGE_PREROUTING flag is not\nset. The flag is only set during the simulated hook.\n\nBecause skb-\u003enf_bridge is only freed when the packet is destroyed, the\npacket will not only skip the first invocation of NF_IP_PRE_ROUTING, but\nin the case of tunnel devices on top of the bridge also all further ones.\nForwarded packets from a bridge encapsulated by a tunnel device and sent\nas locally outgoing packet will also still have the incorrect bridge\ninformation from the input path attached.\n\nWe already have nf_reset calls on all RX/TX paths of tunnel devices,\nso simply reset the nf_bridge field there too. As an added bonus,\nthe bridge information for locally delivered packets is now also freed\nwhen the packet is queued to a socket.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "9500e8a81fe6302fcc5e4110adc4d166c9873d3a",
      "tree": "9b26d81e2d69869d2a01c4b33f568ab6cf1e0378",
      "parents": [
        "f8cd54884e675dfaf0c86cc7c088adb6ca9d7638"
      ],
      "author": {
        "name": "Jamal Hadi Salim",
        "email": "hadi@cyberus.ca",
        "time": "Mon Mar 20 19:15:29 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 19:15:29 2006 -0800"
      },
      "message": "[IPSEC]: Sync series - fast path\n\nFast path sequence updates that will generate ipsec async\nevents\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a24276924875802853b5bdc12c56d29f1c1bbc79",
      "tree": "5725689bf434004143ae875bbfee3d3d29ddcdb0",
      "parents": [
        "c4b885139203d37f76662c37ae645fe8e0f4e4e5"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 18:03:59 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 18:03:59 2006 -0800"
      },
      "message": "[NETFILTER]: ctnetlink: avoid unneccessary event message generation\n\nAvoid unneccessary event message generation by checking for netlink\nlisteners before building a message.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c4b885139203d37f76662c37ae645fe8e0f4e4e5",
      "tree": "5cedf4d632b273df81bf1712b95dbc8b96cdc0e4",
      "parents": [
        "f2ffd9eeda82b476c034d733be08ecf6a87d2edf"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 18:03:40 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 18:03:40 2006 -0800"
      },
      "message": "[NETFILTER]: x_tables: replace IPv4/IPv6 policy match by address family independant version\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c49867347404c46f137a261643ed4fce4376f324",
      "tree": "0b561e2eae19b0073435a4a73df671eae878c30a",
      "parents": [
        "1c524830d0b39472f0278989bf1119750a5e234d"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 18:02:56 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 18:02:56 2006 -0800"
      },
      "message": "[NETFILTER]: x_tables: add xt_{match,target} arguments to match/target functions\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "1c524830d0b39472f0278989bf1119750a5e234d",
      "tree": "9c60dd1717ddf458f66c4a71cb41c3ef7186cdd3",
      "parents": [
        "5d04bff096180f032de8b9b12153a8a1b4009b8d"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 18:02:15 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 18:02:15 2006 -0800"
      },
      "message": "[NETFILTER]: x_tables: pass registered match/target data to match/target functions\n\nThis allows to make decisions based on the revision (and address family\nwith a follow-up patch) at runtime.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "aa83c1ab4384c0905527c84e5135a56daa885834",
      "tree": "3bfacb7cf888e0d312a1a3ed2e9afff72db5b4f4",
      "parents": [
        "1d5cd90976fa0d1cc21554b9d43f5c517323ebfc"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 18:01:28 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 18:01:28 2006 -0800"
      },
      "message": "[NETFILTER]: Convert arp_tables targets to centralized error checking\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "1d5cd90976fa0d1cc21554b9d43f5c517323ebfc",
      "tree": "3eb43557a1d23c71ea41b91e4ee001ac43b8ba21",
      "parents": [
        "3cdc7c953eb1e1e1d1b82adbd140bf3451c165b1"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 18:01:14 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 18:01:14 2006 -0800"
      },
      "message": "[NETFILTER]: Convert ip_tables matches/targets to centralized error checking\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3cdc7c953eb1e1e1d1b82adbd140bf3451c165b1",
      "tree": "82d44723c94904d52fc5234eaaa505688bdf0dc3",
      "parents": [
        "37f9f7334b86ffc3b8a1921842ae33cb9aa22ee3"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Mar 20 18:00:36 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 18:00:36 2006 -0800"
      },
      "message": "[NETFILTER]: Change {ip,ip6,arp}_tables to use centralized error checking\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "f2ad52c9da2229d7f038d02139d21478b33b76b4",
      "tree": "8faeeb5dbd332e9bae28d12d6e54945d587db0fa",
      "parents": [
        "77ff72d528d5b9d30a47f42f364ba34d931f9da3"
      ],
      "author": {
        "name": "Holger Eitzenberger",
        "email": "heitzenberger@astaro.com",
        "time": "Mon Mar 20 17:58:21 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 17:58:21 2006 -0800"
      },
      "message": "[NETFILTER]: Fix CID offset bug in PPTP NAT helper debug message\n\nThe recent (kernel 2.6.15.1) fix for PPTP NAT helper introduced a\nbug - which only appears if DEBUGP is enabled though.\n\nThe calculation of the CID offset into a PPTP request struct is\nnot correct, so that at least not the correct CID is displayed\nif DEBUGP is enabled.\n\nThis patch corrects CID offset calculation and introduces a #define\nfor that.\n\nSigned-off-by: Holger Eitzenberger \u003cheitzenberger@astaro.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "dc808fe28db59fadf4ec32d53f62477fa28f3be8",
      "tree": "2d7033e5808a63d7fb1bddc452d1ec0b2f3d381a",
      "parents": [
        "0d36f37bb1e1cbadca6dc90a840bb2bc9ab51c44"
      ],
      "author": {
        "name": "Harald Welte",
        "email": "laforge@netfilter.org",
        "time": "Mon Mar 20 17:56:32 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 17:56:32 2006 -0800"
      },
      "message": "[NETFILTER] nf_conntrack: clean up to reduce size of \u0027struct nf_conn\u0027\n\nThis patch moves all helper related data fields of \u0027struct nf_conn\u0027\ninto a separate structure \u0027struct nf_conn_help\u0027.  This new structure\nis only present in conntrack entries for which we actually have a\nhelper loaded.\n\nAlso, this patch cleans up the nf_conntrack \u0027features\u0027 mechanism to\nresemble what the original idea was: Just glue the feature-specific\ndata structures at the end of \u0027struct nf_conn\u0027, and explicitly\nre-calculate the pointer to it when needed rather than keeping\npointers around.\n\nSaves 20 bytes per conntrack on my x86_64 box. A non-helped conntrack\nis 276 bytes. We still need to save another 20 bytes in order to fit\ninto to target of 256bytes.\n\nSigned-off-by: Harald Welte \u003claforge@netfilter.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5d424d5a674f782d0659a3b66d951f412901faee",
      "tree": "579871172044e02e626a90388d19ec55cf2d1fc4",
      "parents": [
        "1d60290f27e7dc4bce2c43922d0bfa9abd246fc9"
      ],
      "author": {
        "name": "John Heffner",
        "email": "jheffner@psc.edu",
        "time": "Mon Mar 20 17:53:41 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 17:53:41 2006 -0800"
      },
      "message": "[TCP]: MTU probing\n\nImplementation of packetization layer path mtu discovery for TCP, based on\nthe internet-draft currently found at\n\u003chttp://www.ietf.org/internet-drafts/draft-ietf-pmtud-method-05.txt\u003e.\n\nSigned-off-by: John Heffner \u003cjheffner@psc.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d15150f755bb468afe003d1afee0f45a2fc5eeeb",
      "tree": "68ad3da556162faaf63a7958c7906d30f2cea142",
      "parents": [
        "2b191befe2c47c2f6e96b836a1f6054c9cbc4a0b"
      ],
      "author": {
        "name": "Adrian Bunk",
        "email": "bunk@stusta.de",
        "time": "Mon Mar 20 17:46:56 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 17:46:56 2006 -0800"
      },
      "message": "[IPV4] fib_rules.c: make struct fib_rules static again\n\nstruct fib_rules became global for no good reason.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7b204afd45820fc21b5983205ad535c6b8088765",
      "tree": "4c81e006c51e7cf54a6969f6df71a3c45c2aa242",
      "parents": [
        "d8dcffee860d6b63996923b10f07c91d3d6c2fab"
      ],
      "author": {
        "name": "Robert Olsson",
        "email": "robert.olsson@its.uu.se",
        "time": "Mon Mar 20 17:18:53 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Mar 20 17:18:53 2006 -0800"
      },
      "message": "[IPV4]: Use RCU locking in fib_rules.\n\nSigned-off-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "31fe4d331729e9687db84521c3ceb8e43390efcf",
      "tree": "3db1ef1a3daaf10d01ab18dbcc0f107857919eac",
      "parents": [
        "baa829d8926f02ab04be6ec37780810d221c5b4b"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Sun Mar 12 20:40:43 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Mar 12 20:40:43 2006 -0800"
      },
      "message": "[NETFILTER]: arp_tables: fix NULL pointer dereference\n\nThe check is wrong and lets NULL-ptrs slip through since !IS_ERR(NULL)\nis true.\n\nCoverity #190\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "baa829d8926f02ab04be6ec37780810d221c5b4b",
      "tree": "8c2236eba68bb65aa535ab78e58777ff51de6746",
      "parents": [
        "4a1ff6e2bde56cdf176bd54d557b2e15e819f810"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Sun Mar 12 20:35:12 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Mar 12 20:39:40 2006 -0800"
      },
      "message": "[IPV4/6]: Fix UFO error propagation\n\nWhen ufo_append_data fails err is uninitialized, but returned back.\nStrangely gcc doesn\u0027t notice it.\n\nCoverity #901 and #902\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4a1ff6e2bde56cdf176bd54d557b2e15e819f810",
      "tree": "c831cb72a76e69b3e781f070c510a59b06e39cb9",
      "parents": [
        "cc9a06cd8d6fbb69b4d3c46760c132cfe312fb85"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Sun Mar 12 20:34:53 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Mar 12 20:39:39 2006 -0800"
      },
      "message": "[TCP]: tcp_highspeed: fix AIMD table out-of-bounds access\n\nCovertiy #547\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ba244fe9005323452428fee4b4b7d0c70a06b627",
      "tree": "a2f64703eeb1cae57ea3d4b5d2dd481614ae82d1",
      "parents": [
        "c12743764129e40dc8461afc1096cf175c7c25f2"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Mar 11 18:51:49 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Mar 11 18:51:49 2006 -0800"
      },
      "message": "[TCP]: Fix tcp_tso_should_defer() when limit\u003e\u003d65536\n\nThat\u0027s \u003e\u003d a full sized TSO frame, so we should always\nreturn 0 in that case.\n\nBased upon a report and initial patch from Lachlan\nAndrew, final patch suggested by Herbert Xu.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "850a9a4e3c019ce67e3bc29c810ac213ec4c169e",
      "tree": "e5ecac1ef9c88cdfabea26de440158b526afbe8a",
      "parents": [
        "d0b004840bd3b5ff2f2a0ad14fa0bd43349f5175"
      ],
      "author": {
        "name": "Thomas Graf",
        "email": "tgraf@suug.ch",
        "time": "Tue Mar 07 14:56:12 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Mar 07 14:56:12 2006 -0800"
      },
      "message": "[NETFILTER] ip_queue: Fix wrong skb-\u003elen \u003d\u003d nlmsg_len assumption\n\nThe size of the skb carrying the netlink message is not\nequivalent to the length of the actual netlink message\ndue to padding. ip_queue matches the length of the payload\nagainst the original packet size to determine if packet\nmangling is desired, due to the above wrong assumption\narbitary packets may not be mangled depening on their\noriginal size.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "bafac2a512bf4fd2ce7520f3976ce8aab4435f74",
      "tree": "ff5c6538eeebceee2b3b5b137d6c66e8d28e77f1",
      "parents": [
        "45fe4dc08cbf9510074b97a16606366c1d405f4d"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon Feb 27 13:04:17 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Feb 27 13:04:17 2006 -0800"
      },
      "message": "[NETFILTER]: Restore {ipt,ip6t,ebt}_LOG compatibility\n\nThe nfnetlink_log infrastructure changes broke compatiblity of the LOG\ntargets. They currently use whatever log backend was registered first,\nwhich means that if ipt_ULOG was loaded first, no messages will be printed\nto the ring buffer anymore.\n\nRestore compatiblity by using the old log functions by default and only use\nthe nf_log backend if the user explicitly said so.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "752c1f4c78fe86d0fd6497387f763306b0d8fc53",
      "tree": "50d7e52940d1adf0936805645d52e2419e5922cf",
      "parents": [
        "4bf05eceecf2efb4c883e9e9b17825682e7330dd"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Mon Feb 27 13:00:40 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Feb 27 13:00:40 2006 -0800"
      },
      "message": "[IPSEC]: Kill post_input hook and do NAT-T in esp_input directly\n\nThe only reason post_input exists at all is that it gives us the\npotential to adjust the checksums incrementally in future which\nwe ought to do.\n\nHowever, after thinking about it for a bit we can adjust the\nchecksums without using this post_input stuff at all.  The crucial\npoint is that only the inner-most NAT-T SA needs to be considered\nwhen adjusting checksums.  What\u0027s more, the checksum adjustment\ncomes down to a single u32 due to the linearity of IP checksums.\n\nWe just happen to have a spare u32 lying around in our skb structure :)\nWhen ip_summed is set to CHECKSUM_NONE on input, the value of skb-\u003ecsum\nis currently unused.  All we have to do is to make that the checksum\nadjustment and voila, there goes all the post_input and decap structures!\n\nI\u0027ve left in the decap data structures for now since it\u0027s intricately\nwoven into the sec_path stuff.  We can kill them later too.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4bf05eceecf2efb4c883e9e9b17825682e7330dd",
      "tree": "0cbd4b8a8b972220e97c88aadbee0661b0e88747",
      "parents": [
        "de5f503cfbe4f942492269c6bd97a16a4d61e488"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Mon Feb 27 13:00:01 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Feb 27 13:00:01 2006 -0800"
      },
      "message": "[IPSEC] esp: Kill unnecessary block and indentation\n\nWe used to keep sg on the stack which is why the extra block was useful.\nWe\u0027ve long since stopped doing that so let\u0027s kill the block and save\nsome indentation.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4da3089f2b582b21e1374ccc6df722d4361eb915",
      "tree": "fe29539a688f524ef58eab1178c1ef1bea2bff66",
      "parents": [
        "f8d0e3f11593928ac3f968c378a44e80b04488c9"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Thu Feb 23 16:19:26 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Feb 23 16:19:26 2006 -0800"
      },
      "message": "[IPSEC]: Use TOS when doing tunnel lookups\n\nWe should use the TOS because it\u0027s one of the routing keys.  It also\nmeans that we update the correct routing cache entry when PMTU occurs.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "85259878499d6c428cba191bb4e415a250dcd75a",
      "tree": "6b9c1592f66886917b6ec09dd55f9c52eb850561",
      "parents": [
        "42cf93cd464e0df3c85d298c647411bae6d99e6e"
      ],
      "author": {
        "name": "Suresh Bhogavilli",
        "email": "sbhogavilli@verisign.com",
        "time": "Tue Feb 21 13:42:22 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Feb 23 16:10:52 2006 -0800"
      },
      "message": "[IPV4]: Fix garbage collection of multipath route entries\n\nWhen garbage collecting route cache entries of multipath routes\nin rt_garbage_collect(), entries were deleted from the hash bucket\n\u0027i\u0027 while holding a spin lock on bucket \u0027k\u0027 resulting in a system\nhang.  Delete entries, if any, from bucket \u0027k\u0027 instead.\n\nSigned-off-by: Suresh Bhogavilli \u003csbhogavilli@verisign.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "8e249f088131cde5f77fd073bf0b0e8b3e9ea4ac",
      "tree": "e0113097593dd2b805310bf525b0d2a6823f0a06",
      "parents": [
        "669d32a293a348e692c365ddac2b23f3b907fcf1"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Sun Feb 19 22:29:47 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Feb 19 22:29:47 2006 -0800"
      },
      "message": "[NETFILTER]: Fix outgoing redirects to loopback\n\nWhen redirecting an outgoing packet to loopback, it keeps the original\nconntrack reference and information from the outgoing path, which\nfalsely triggers the check for DNAT on input and the dst_entry is\nreleased to trigger rerouting. ip_route_input refuses to route the\npacket because it has a local source address and it is dropped.\n\nLook at the packet itself to dermine if it was NATed. Also fix a\nmissing inversion that causes unneccesary xfrm lookups.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "bc6e14b6f0b06fe93d809d22e257ddd275feeda9",
      "tree": "ca4ef0d384a904c6fd5a4f995a500034a4733fce",
      "parents": [
        "995110143880fd9cb255fa5df05f8950c56fb43a"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Sun Feb 19 22:26:40 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Feb 19 22:26:40 2006 -0800"
      },
      "message": "[NETFILTER]: Fix NAT PMTUD problems\n\nICMP errors are only SNATed when their source matches the source of the\nconnection they are related to, otherwise the source address is not\nchanged. This creates problems with ICMP frag. required messages\noriginating from a router behind the NAT, if private IPs are used the\npacket has a good change of getting dropped on the path to its destination.\n\nAlways NAT ICMP errors similar to the original connection.\n\nBased on report by Al Viro.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7d3cdc6b554137a7a0534ce38b155a63a3117f27",
      "tree": "af96ac02ab7884384e2a4e5ac62f8343ee0b463d",
      "parents": [
        "deac0ccdb4da16b68539d75edecf26162de05150"
      ],
      "author": {
        "name": "Yasuyuki Kozakai",
        "email": "yasuyuki.kozakai@toshiba.co.jp",
        "time": "Wed Feb 15 15:22:21 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Feb 15 15:22:21 2006 -0800"
      },
      "message": "[NETFILTER]: nf_conntrack: move registration of __nf_ct_attach\n\nMove registration of __nf_ct_attach to nf_conntrack_core to make it usable\nfor IPv6 connection tracking as well.\n\nSigned-off-by: Yasuyuki Kozakai \u003cyasuyuki.kozakai@toshiba.co.jp\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "48d5cad87c3a4998d0bda16ccfb5c60dfe4de5fb",
      "tree": "bfad91af72f4c522a44bab6133b540cda365d8c1",
      "parents": [
        "5ecfbae093f0c37311e89b29bfc0c9d586eace87"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Wed Feb 15 15:10:22 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Feb 15 15:10:22 2006 -0800"
      },
      "message": "[XFRM]: Fix SNAT-related crash in xfrm4_output_finish\n\nWhen a packet matching an IPsec policy is SNATed so it doesn\u0027t match any\npolicy anymore it looses its xfrm bundle, which makes xfrm4_output_finish\ncrash because of a NULL pointer dereference.\n\nThis patch directs these packets to the original output path instead. Since\nthe packets have already passed the POST_ROUTING hook, but need to start at\nthe beginning of the original output path which includes another\nPOST_ROUTING invocation, a flag is added to the IPCB to indicate that the\npacket was rerouted and doesn\u0027t need to pass the POST_ROUTING hook again.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ee68cea2c26b7a8222f9020f54d22c6067011e8b",
      "tree": "e99b13be0392532d17a133fe6b9e7edb0a7a4de9",
      "parents": [
        "10ee39fe3ff618d274e1cd0f6abbc2917b736bfd"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Wed Feb 15 01:34:23 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Feb 15 01:34:23 2006 -0800"
      },
      "message": "[NETFILTER]: Fix xfrm lookup after SNAT\n\nTo find out if a packet needs to be handled by IPsec after SNAT, packets\nare currently rerouted in POST_ROUTING and a new xfrm lookup is done. This\nbreaks SNAT of non-unicast packets to non-local addresses because the\npacket is routed as incoming packet and no neighbour entry is bound to the\ndst_entry. In general, it seems to be a bad idea to replace the dst_entry\nafter the packet was already sent to the output routine because its state\nmight not match what\u0027s expected.\n\nThis patch changes the xfrm lookup in POST_ROUTING to re-use the original\ndst_entry without routing the packet again. This means no policy routing\ncan be used for transport mode transforms (which keep the original route)\nwhen packets are SNATed to match the policy, but it looks like the best\nwe can do for now.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "77decfc716d460b3f7037bb19bd4eb12cd0dc996",
      "tree": "e6fca07597e12c07af4bd90cfffc80a3f694387e",
      "parents": [
        "bf3883c12fece9189ab4f7bb6e2690451db1366e"
      ],
      "author": {
        "name": "Dave Jones",
        "email": "davej@redhat.com",
        "time": "Mon Feb 13 15:36:21 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Feb 13 15:36:21 2006 -0800"
      },
      "message": "[IPV4] ICMP: Invert default for invalid icmp msgs sysctl\n\nisic can trigger these msgs to be spewed at a very high rate.\nThere\u0027s already a sysctl to turn them off. Given these messages\naren\u0027t useful for most people, this patch disables them by\ndefault.\n\nSigned-off-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    }
  ],
  "next": "6fcf9412de64056238a6295f21db7aa9c37a532e"
}
