netdev - netfilter 00/08: netfilter update

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 24 Feb 2010 18:49:27 +0100 (MET)
From:	Patrick McHardy <kaber@...sh.net>
To:	davem@...emloft.net
Cc:	netdev@...r.kernel.org, Patrick McHardy <kaber@...sh.net>,
	netfilter-devel@...r.kernel.org
Subject: netfilter 00/08: netfilter update

Hi Dave,

following is the probably final netfilter update for 2.6.34, containing:

- an IPv6 reassembly fix for packets "fragmented" into a single fragment
  from myself

- an fix for an overflow and a false match in the recent match from Tim Gardner

- replacement of the xtables iteration macros by a set of new macros behaving
  more like the regular list iteration macros from Jan

Please apply or pull from:

git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-next-2.6.git master

Thanks!


 include/linux/netfilter/x_tables.h        |   17 ++
 include/linux/netfilter_arp/arp_tables.h  |   10 +-
 include/linux/netfilter_ipv4/ip_tables.h  |   15 +-
 include/linux/netfilter_ipv6/ip6_tables.h |   14 +-
 net/ipv4/netfilter/arp_tables.c           |  301 +++++++++-----------
 net/ipv4/netfilter/ip_tables.c            |  436 ++++++++++++++---------------
 net/ipv6/netfilter/ip6_tables.c           |  436 ++++++++++++++---------------
 net/ipv6/netfilter/nf_conntrack_reasm.c   |    8 +-
 net/netfilter/xt_TCPMSS.c                 |   12 +-
 net/netfilter/xt_recent.c                 |    4 +-
 10 files changed, 597 insertions(+), 656 deletions(-)

Jan Engelhardt (5):
      netfilter: xtables: replace XT_ENTRY_ITERATE macro
      netfilter: xtables: optimize call flow around xt_entry_foreach
      netfilter: xtables: replace XT_MATCH_ITERATE macro
      netfilter: xtables: optimize call flow around xt_ematch_foreach
      netfilter: xtables: reduce arguments to translate_table

Patrick McHardy (1):
      netfilter: nf_conntrack_reasm: properly handle packets fragmented into a single fragment

Tim Gardner (2):
      netfilter: xt_recent: fix buffer overflow
      netfilter: xt_recent: fix false match
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html