Ulrich Weber a39bdce2f2 netfilter: nf_nat: don't check for port change on ICMP tuples ...

commit 38fe36a248 upstream.

ICMP tuples have id in src and type/code in dst.
So comparing src.u.all with dst.u.all will always fail here
and ip_xfrm_me_harder() is called for every ICMP packet,
even if there was no NAT.

Signed-off-by: Ulrich Weber <ulrich.weber@sophos.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2012-11-26 11:37:48 -08:00

..

netfilter

netfilter: nf_nat: don't check for port change on ICMP tuples

2012-11-26 11:37:48 -08:00

af_inet.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ah4.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

arp.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

cipso_ipv4.c

cipso: don't follow a NULL pointer when setsockopt() is called

2012-08-09 08:31:42 -07:00

datagram.c

…

devinet.c

Merge tag 'split-asm_system_h-for-linus-20120328' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-asm_system

2012-03-28 15:58:21 -07:00

esp4.c

xfrm: take net hdr len into account for esp payload size calculation

2012-06-10 00:36:15 +09:00

fib_frontend.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

fib_lookup.h

…

fib_rules.c

…

fib_semantics.c

ipv4: fix the rcu race between free_fib_info and ip_route_output_slow

2012-06-10 00:36:14 +09:00

fib_trie.c

ipv4: Do not use dead fib_info entries.

2012-05-10 22:16:32 -04:00

gre.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

icmp.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

igmp.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

inet_connection_sock.c

tcp: bind() optimize port allocation

2012-01-25 21:50:43 -05:00

inet_diag.c

net: inet_diag -- Return error code if protocol handler is missed

2012-11-17 13:16:19 -08:00

inet_fragment.c

…

inet_hashtables.c

…

inet_lro.c

…

inet_timewait_sock.c

…

inetpeer.c

inetpeer: fix a race in inetpeer_gc_worker()

2012-07-16 09:03:45 -07:00

ip_forward.c

…

ip_fragment.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

ip_gre.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

ip_input.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ip_options.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

ip_output.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

ip_sockglue.c

ipv4: avoid undefined behavior in do_ip_setsockopt()

2012-11-26 11:37:46 -08:00

ipcomp.c

net: Convert printks to pr_<level>

2012-03-11 23:42:51 -07:00

ipconfig.c

net: Convert printks to pr_<level>

2012-03-11 23:42:51 -07:00

ipip.c

net: Convert printks to pr_<level>

2012-03-11 23:42:51 -07:00

ipmr.c

net: ipv4: ipmr_expire_timer causes crash when removing net namespace

2012-10-02 10:29:50 -07:00

Kconfig

net: Fix build regression when INET_UDP_DIAG=y and IPV6=m

2012-02-07 13:35:28 -05:00

Makefile

…

netfilter.c

…

ping.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

proc.c

tcp: reduce out_of_order memory use

2012-03-19 16:53:08 -04:00

protocol.c

…

raw.c

ipv4: raw: fix icmp_filter()

2012-10-13 05:38:44 +09:00

route.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2012-04-02 17:53:39 -07:00

syncookies.c

tcp: fix syncookie regression

2012-03-11 15:52:12 -07:00

sysctl_net_ipv4.c

tcp: properly initialize tcp memory limits

2012-02-02 14:34:41 -05:00

tcp_bic.c

tcp: fix undo after RTO for BIC

2012-01-20 14:17:26 -05:00

tcp_cong.c

tcp: Apply device TSO segment limit earlier

2012-10-02 10:29:34 -07:00

tcp_cubic.c

tcp: fix undo after RTO for CUBIC

2012-01-20 14:17:26 -05:00

tcp_diag.c

inet_diag: Rename inet_diag_req into inet_diag_req_v2

2012-01-11 12:56:06 -08:00

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

net: fix divide by zero in tcp algorithm illinois

2012-11-17 13:16:17 -08:00

tcp_input.c

tcp: fix cwnd reduction for non-sack recovery

2012-10-02 10:29:38 -07:00

tcp_ipv4.c

tcp: resets are misrouted

2012-10-28 10:14:16 -07:00

tcp_lp.c

…

tcp_memcontrol.c

Merge branch 'for-3.4' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup

2012-03-20 18:11:21 -07:00

tcp_minisocks.c

tcp: md5: rcu conversion

2012-01-31 12:14:00 -05:00

tcp_output.c

tcp: Apply device TSO segment limit earlier

2012-10-02 10:29:34 -07:00

tcp_probe.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

tcp_scalable.c

…

tcp_timer.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

tcp_vegas.c

…

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

tcp: fix FIONREAD/SIOCINQ

2012-11-17 13:16:15 -08:00

tunnel4.c

net: Convert printks to pr_<level>

2012-03-11 23:42:51 -07:00

udp_diag.c

udp_diag: implement idiag_get_info for udp/udplite to get queue information

2012-04-25 20:43:01 -04:00

udp_impl.h

…

udp.c

Remove all #inclusions of asm/system.h

2012-03-28 18:30:03 +01:00

udplite.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00

xfrm4_input.c

…

xfrm4_mode_beet.c

ipsec: be careful of non existing mac headers

2012-02-23 16:50:45 -05:00

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

ipsec: be careful of non existing mac headers

2012-02-23 16:50:45 -05:00

xfrm4_output.c

…

xfrm4_policy.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

net: ipv4: Standardize prefixes for message logging

2012-03-12 17:05:21 -07:00