Thomas Graf c58dd2dd44 netfilter: Can't fail and free after table replacement ... All xtables variants suffer from the defect that the copy_to_user() to copy the counters to user memory may fail after the table has already been exchanged and thus exposed. Return an error at this point will result in freeing the already exposed table. Any subsequent packet processing will result in a kernel panic. We can't copy the counters before exposing the new tables as we want provide the counter state after the old table has been unhooked. Therefore convert this into a silent error. Cc: Florian Westphal <fw@strlen.de> Signed-off-by: Thomas Graf <tgraf@suug.ch> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2014-04-05 17:46:22 +02:00
..
netfilter	netfilter: Can't fail and free after table replacement	2014-04-05 17:46:22 +02:00
Kconfig	ip6_vti: Fix build when NET_IP_TUNNEL is not set.	2014-02-20 14:29:49 +01:00
Makefile	xfrm6: Add IPsec protocol multiplexer	2014-03-14 07:28:07 +01:00
addrconf.c	ipv6: move DAD and addrconf_verify processing to workqueue	2014-03-28 16:54:50 -04:00
addrconf_core.c	…
addrlabel.c	ipv6:fix checkpatch errors with assignment in if condition	2014-02-17 16:57:29 -05:00
af_inet6.c	…
ah6.c	ah6: Use the IPsec protocol multiplexer API	2014-03-14 07:28:07 +01:00
anycast.c	…
datagram.c	…
esp6.c	esp6: Use the IPsec protocol multiplexer API	2014-03-14 07:28:07 +01:00
exthdrs.c	…
exthdrs_core.c	ipv6: ipv6_find_hdr restore prev functionality	2014-02-27 18:27:26 -05:00
exthdrs_offload.c	ipv6: Fix exthdrs offload registration.	2014-03-06 16:35:55 -05:00
fib6_rules.c	…
icmp.c	ipv6: some ipv6 statistic counters failed to disable bh	2014-03-31 16:38:12 -04:00
inet6_connection_sock.c	…
inet6_hashtables.c	…
ip6_checksum.c	ipv6: log src and dst along with "udp checksum is 0"	2014-02-26 15:46:25 -05:00
ip6_fib.c	ipv6: fix checkpatch errors of "foo*" and "foo * bar"	2014-03-29 18:15:52 -04:00
ip6_flowlabel.c	ipv6: remove some unused include in flowlabel	2014-02-18 18:11:05 -05:00
ip6_gre.c	net: introduce netdev_alloc_pcpu_stats() for drivers	2014-02-14 15:49:55 -05:00
ip6_icmp.c	…
ip6_input.c	…
ip6_offload.c	ipv4: ipv6: better estimate tunnel header cut for correct ufo handling	2014-02-25 18:27:06 -05:00
ip6_offload.h	…
ip6_output.c	ipv6: some ipv6 statistic counters failed to disable bh	2014-03-31 16:38:12 -04:00
ip6_tunnel.c	net: Replace u64_stats_fetch_begin_bh to u64_stats_fetch_begin_irq	2014-03-14 22:41:36 -04:00
ip6_vti.c	vti6: Enable namespace changing	2014-03-14 07:28:09 +01:00
ip6mr.c	ip6mr: fix mfc notification flags	2014-03-20 16:24:28 -04:00
ipcomp6.c	ipcomp6: Use the IPsec protocol multiplexer API	2014-03-14 07:28:07 +01:00
ipv6_sockglue.c	ipv6: yet another new IPV6_MTU_DISCOVER option IPV6_PMTUDISC_OMIT	2014-02-26 15:51:01 -05:00
mcast.c	ipv6: some ipv6 statistic counters failed to disable bh	2014-03-31 16:38:12 -04:00
mip6.c	…
ndisc.c	…
netfilter.c	…
output_core.c	ipv6: strengthen fallback fragmentation id generation	2014-03-31 16:33:38 -04:00
ping.c	ipv6: some ipv6 statistic counters failed to disable bh	2014-03-31 16:38:12 -04:00
proc.c	…
protocol.c	…
raw.c	…
reassembly.c	…
route.c	ipv6: reuse rt6_need_strict	2014-03-31 16:16:16 -04:00
sit.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-03-05 20:32:02 -05:00
syncookies.c	…
sysctl_net_ipv6.c	…
tcp_ipv6.c	ipv6: tcp_ipv6 policy route issue	2014-03-31 16:16:17 -04:00
tcpv6_offload.c	…
tunnel6.c	…
udp.c	…
udp_impl.h	…
udp_offload.c	ipv6: reuse ip6_frag_id from ip6_ufo_append_data	2014-02-22 00:28:21 -05:00
udplite.c	…
xfrm6_input.c	…
xfrm6_mode_beet.c	…
xfrm6_mode_ro.c	…
xfrm6_mode_transport.c	…
xfrm6_mode_tunnel.c	xfrm6: Remove xfrm_tunnel_notifier	2014-03-14 07:28:08 +01:00
xfrm6_output.c	…
xfrm6_policy.c	xfrm6: Add IPsec protocol multiplexer	2014-03-14 07:28:07 +01:00
xfrm6_protocol.c	xfrm6: Add IPsec protocol multiplexer	2014-03-14 07:28:07 +01:00
xfrm6_state.c	…
xfrm6_tunnel.c	…