linux/net/netfilter/nfnetlink_queue.c, branch v2.6.19

[NETFILTER]: Use pskb_trim in {ip,ip6,nfnetlink}_queue

2006-11-16T05:18:48Z

Based on patch by James D. Nurmi: I've got some code very dependant on nfnetlink_queue, and turned up a large number of warns coming from skb_trim. While it's quite possibly my code, having not seen it on older kernels made me a bit suspect. Anyhow, based on some googling I turned up this thread: http://lkml.org/lkml/2006/8/13/56 And believe the issue to be related, so attached is a small patch to the kernel -- not sure if this is completely correct, but for anyone else hitting the WARN_ON(1) in skbuff.h, it might be helpful.. Signed-off-by: James D. Nurmi Ported to ip6_queue and nfnetlink_queue and added return value checks. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER] bug: skb->protocol is already net-endian

2006-11-05T22:11:29Z

htons() is not needed (and no, it's not misspelled ntohs() - userland expects net-endian here). Signed-off-by: Al Viro Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink_queue: fix typo in error message

2006-09-22T21:55:28Z

Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NET]: Replace CHECKSUM_HW by CHECKSUM_PARTIAL/CHECKSUM_COMPLETE

2006-09-22T21:53:53Z

Replace CHECKSUM_HW by CHECKSUM_PARTIAL (for outgoing packets, whose checksum still needs to be completed) and CHECKSUM_COMPLETE (for incoming packets, device supplied full checksum). Patch originally from Herbert Xu, updated by myself for 2.6.18-rc3. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: ip_queue/nfnetlink_queue: drop bridge port references when dev disappears

2006-06-29T23:57:48Z

When a device that is acting as a bridge port is unregistered, the ip_queue/nfnetlink_queue notifier doesn't check if its one of physindev/physoutdev and doesn't release the references if it is. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: Fix section mismatch warnings

2006-04-10T05:25:34Z

Fix section mismatch warnings caused by netfilter's init_or_cleanup functions used in many places by splitting the init from the cleanup parts. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: Rename init functions.

2006-03-29T01:02:48Z

Every netfilter module uses `init' for its module_init() function and `fini' or `cleanup' for its module_exit() function. Problem is, this creates uninformative initcall_debug output and makes ctags rather useless. So go through and rename them all to $(filename)_init and $(filename)_fini. Signed-off-by: Andrew Morton Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink_queue: fix nfnetlink message size

2006-03-22T21:54:40Z

Fix oversized message, use NLMSG_SPACE just one since it reserves space for the netlink header and NFA_SPACE for every attribute. Thanks to Harald Welte for the feedback Signed-off-by: Pablo Neira Ayuso Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink_queue: fix possible NULL-ptr dereference

2006-03-13T04:39:35Z

Fix NULL-ptr dereference when a config message for a non-existant queue containing only an NFQA_CFG_PARAMS attribute is received. Coverity #433 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: nfnetlink_queue: fix packet marking over netlink

2006-02-05T07:51:20Z

The packet marked is the netlink skb, not the queued skb. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller