Patrick McHardy 48d5cad87c [XFRM]: Fix SNAT-related crash in xfrm4_output_finish ... When a packet matching an IPsec policy is SNATed so it doesn't match any policy anymore it looses its xfrm bundle, which makes xfrm4_output_finish crash because of a NULL pointer dereference. This patch directs these packets to the original output path instead. Since the packets have already passed the POST_ROUTING hook, but need to start at the beginning of the original output path which includes another POST_ROUTING invocation, a flag is added to the IPCB to indicate that the packet was rerouted and doesn't need to pass the POST_ROUTING hook again. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2006-02-15 15:10:22 -08:00
..
ipvs	[PATCH] capable/capability.h (net/)	2006-01-11 18:42:14 -08:00
netfilter	[NETFILTER]: Fix xfrm lookup after SNAT	2006-02-15 01:34:23 -08:00
af_inet.c	[PATCH] capable/capability.h (net/)	2006-01-11 18:42:14 -08:00
ah4.c
arp.c	[PATCH] capable/capability.h (net/)	2006-01-11 18:42:14 -08:00
datagram.c
devinet.c	[NETLINK]: illegal use of pid in rtnetlink	2006-02-09 16:43:41 -08:00
esp4.c
fib_frontend.c	x86: Work around compiler code generation bug with -Os	2006-01-14 22:08:28 -08:00
fib_hash.c
fib_lookup.h
fib_rules.c
fib_semantics.c	[NETLINK]: illegal use of pid in rtnetlink	2006-02-09 16:43:41 -08:00
fib_trie.c
icmp.c	[IPV4] ICMP: Invert default for invalid icmp msgs sysctl	2006-02-13 15:36:21 -08:00
igmp.c	[PATCH] ipv4 NULL noise removal	2006-02-07 20:57:37 -05:00
inet_connection_sock.c
inet_diag.c	[INET_DIAG]: Introduce sk_diag_fill	2006-01-09 14:56:56 -08:00
inet_hashtables.c
inet_timewait_sock.c
inetpeer.c	[NET]: Change some "if (x) BUG();" to "BUG_ON(x);"	2006-01-09 14:16:18 -08:00
ip_forward.c
ip_fragment.c	[NET]: Endian-annotate struct iphdr	2006-01-06 13:24:29 -08:00
ip_gre.c	[XFRM]: Fix SNAT-related crash in xfrm4_output_finish	2006-02-15 15:10:22 -08:00
ip_input.c	[NETFILTER]: Keep conntrack reference until IPsec policy checks are done	2006-01-07 12:57:36 -08:00
ip_options.c	[PATCH] capable/capability.h (net/)	2006-01-11 18:42:14 -08:00
ip_output.c	[XFRM]: Fix SNAT-related crash in xfrm4_output_finish	2006-02-15 15:10:22 -08:00
ip_sockglue.c	[NET]: Remove more unneeded typecasts on *malloc()	2006-01-11 16:32:14 -08:00
ipcomp.c
ipconfig.c
ipip.c	[XFRM]: Fix SNAT-related crash in xfrm4_output_finish	2006-02-15 15:10:22 -08:00
ipmr.c	[PATCH] capable/capability.h (net/)	2006-01-11 18:42:14 -08:00
Kconfig
Makefile	[NETFILTER]: net/ipv[46]/netfilter.c cleanups	2006-01-10 12:54:29 -08:00
multipath.c
multipath_drr.c
multipath_random.c
multipath_rr.c
multipath_wrandom.c	[IPV4] multipath_wrandom: Fix softirq-unsafe spin lock usage	2006-02-02 16:59:16 -08:00
netfilter.c	[NETFILTER]: Fix xfrm lookup after SNAT	2006-02-15 01:34:23 -08:00
proc.c	[PATCH] percpu data: only iterate over possible CPUs	2006-02-05 11:06:51 -08:00
protocol.c
raw.c	[PATCH] EDAC: atomic scrub operations	2006-01-18 19:20:30 -08:00
route.c	[IPV4]: RT_CACHE_STAT_INC() warning fix	2006-01-17 22:46:49 -08:00
syncookies.c
sysctl_net_ipv4.c
tcp.c
tcp_bic.c
tcp_cong.c
tcp_cubic.c
tcp_diag.c
tcp_highspeed.c
tcp_htcp.c	[TCP] H-TCP: Fix accounting	2006-01-30 20:54:39 -08:00
tcp_hybla.c
tcp_input.c	[TCP]: rcvbuf lock when tcp_moderate_rcvbuf enabled	2006-02-09 17:06:57 -08:00
tcp_ipv4.c	[NET]: Do not export inet_bind_bucket_create twice.	2006-01-31 17:47:02 -08:00
tcp_minisocks.c
tcp_output.c
tcp_scalable.c
tcp_timer.c
tcp_vegas.c
tcp_westwood.c
udp.c	[NETFILTER]: Keep conntrack reference until IPsec policy checks are done	2006-01-07 12:57:36 -08:00
xfrm4_input.c	[IPV4/6]: Netfilter IPsec input hooks	2006-01-07 12:57:31 -08:00
xfrm4_output.c	[XFRM]: Fix SNAT-related crash in xfrm4_output_finish	2006-02-15 15:10:22 -08:00
xfrm4_policy.c	[PATCH] remove bogus asm/bug.h includes.	2006-02-07 20:56:35 -05:00
xfrm4_state.c	[XFRM]: IPsec tunnel wildcard address support	2006-01-13 14:34:36 -08:00
xfrm4_tunnel.c