Florian Westphal 05ef7055de netfilter: fib: check correct rtable in vrf setups ...

We need to init l3mdev unconditionally, else main routing table is searched
and incorrect result is returned unless strict (iif keyword) matching is
requested.

Next patch adds a selftest for this.

Fixes: 2a8a7c0eaa ("netfilter: nft_fib: Fix for rpath check with VRF devices")
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1761
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2024-10-09 23:30:31 +02:00

..

ila

ila: call nf_unregister_net_hooks() sooner

2024-09-05 14:57:12 -07:00

netfilter

netfilter: fib: check correct rtable in vrf setups

2024-10-09 23:30:31 +02:00

addrconf_core.c

…

addrconf.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

addrlabel.c

…

af_inet6.c

tcp: add SO_PEEK_OFF socket option tor TCPv6

2024-08-29 13:00:36 -07:00

ah6.c

…

anycast.c

…

calipso.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

datagram.c

…

esp6_offload.c

xfrm: Log input direction mismatch error in one place

2024-06-17 13:53:19 +02:00

esp6.c

net: support non paged skb frags

2024-09-11 20:44:31 -07:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

…

fib6_notifier.c

…

fib6_rules.c

ipv6: fib_rules: Add DSCP selector support

2024-09-13 21:15:45 -07:00

fou6.c

…

icmp.c

icmp: move icmp_global.credit and icmp_global.stamp to per netns storage

2024-08-30 11:14:06 -07:00

inet6_connection_sock.c

…

inet6_hashtables.c

inet6: constify 'struct net' parameter of various lookup helpers

2024-08-05 16:27:26 -07:00

ioam6_iptunnel.c

ioam6: improve checks on user data

2024-09-03 11:38:32 -07:00

ioam6.c

…

ip6_checksum.c

…

ip6_fib.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-06-20 13:49:59 -07:00

ip6_flowlabel.c

…

ip6_gre.c

netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local

2024-09-03 11:36:43 +02:00

ip6_icmp.c

…

ip6_input.c

net/ipv6: make use of the helper macro LIST_HEAD()

2024-09-06 18:10:21 -07:00

ip6_offload.c

net: gro: initialize network_offset in network layer

2024-05-27 16:46:59 -07:00

ip6_offload.h

…

ip6_output.c

ipv6: prevent possible UAF in ip6_xmit()

2024-08-21 17:35:49 -07:00

ip6_tunnel.c

ip6_tunnel: Unmask upper DSCP bits in ip4ip6_err()

2024-09-04 16:57:11 -07:00

ip6_udp_tunnel.c

…

ip6_vti.c

…

ip6mr.c

netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local

2024-09-03 11:36:43 +02:00

ipcomp6.c

…

ipv6_sockglue.c

ipv6: avoid indirect calls for SOL_IP socket options

2024-08-26 14:53:50 -07:00

Kconfig

net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL

2024-09-22 19:52:07 +01:00

Makefile

…

mcast_snoop.c

…

mcast.c

ipv6: mcast: use min() to simplify the code

2024-08-26 09:48:53 -07:00

mip6.c

…

ndisc.c

net/ipv6: replace deprecated strcpy with strscpy

2024-08-29 12:33:07 -07:00

netfilter.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-06-13 13:13:46 -07:00

output_core.c

…

ping.c

…

proc.c

minmax: add a few more MIN_T/MAX_T users

2024-07-28 13:41:14 -07:00

protocol.c

…

raw.c

net: raw: use sk_skb_reason_drop to free rx packets

2024-06-19 12:44:22 +01:00

reassembly.c

…

route.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-09-15 09:13:19 -07:00

rpl_iptunnel.c

net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input

2024-09-13 19:55:49 -07:00

rpl.c

…

seg6_hmac.c

…

seg6_iptunnel.c

ipv6: sr: block BH in seg6_output_core() and seg6_input_core()

2024-06-03 18:50:08 -07:00

seg6_local.c

seg6: Use nested-BH locking for seg6_bpf_srh_states.

2024-06-24 16:41:23 -07:00

seg6.c

ipv6: sr: restruct ifdefines

2024-05-30 18:29:38 -07:00

sit.c

ipv6: sit: Unmask upper DSCP bits in ipip6_tunnel_bind_dev()

2024-09-04 16:57:11 -07:00

syncookies.c

tcp: use sk_skb_reason_drop to free rx packets

2024-06-19 12:44:22 +01:00

sysctl_net_ipv6.c

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

tcp_ao.c

…

tcp_ipv6.c

tcp: annotate data-races around tcptw->tw_rcv_nxt

2024-08-28 17:08:17 -07:00

tcpv6_offload.c

net: gso: fix tcp fraglist segmentation after pull from frag_list

2024-10-02 17:21:47 -07:00

tunnel6.c

…

udp_impl.h

…

udp_offload.c

…

udp.c

ipv6: udp: constify 'struct net' parameter of socket lookups

2024-08-05 16:27:26 -07:00

udplite.c

…

xfrm6_input.c

…

xfrm6_output.c

…

xfrm6_policy.c

Merge tag 'ipsec-next-2024-07-13' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2024-07-14 07:56:32 -07:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…