diff options
| author | David S. Miller <davem@davemloft.net> | 2017-08-24 11:49:19 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2017-08-24 11:49:19 -0700 |
| commit | af57d2b720252baca5421ec58628da626e1862dc (patch) | |
| tree | 14bfa04f9de7521cef419b2b7ed1c5a42c35d220 /.cocciconfig | |
| parent | d0273ef3b47861dbd6e2ced85c4a532723a3bf8c (diff) | |
| parent | c26844eda9d4fdbd266660e3b3de2d0270e3a1ed (diff) | |
| download | linux-af57d2b720252baca5421ec58628da626e1862dc.tar.bz2 | |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains Netfilter fixes for your net tree,
they are:
1) Fix use after free of struct proc_dir_entry in ipt_CLUSTERIP, patch
from Sabrina Dubroca.
2) Fix spurious EINVAL errors from iptables over nft compatibility layer.
3) Reload pointer to ip header only if there is non-terminal verdict,
ie. XT_CONTINUE, otherwise invalid memory access may happen, patch
from Taehee Yoo.
4) Fix interaction between SYNPROXY and NAT, SYNPROXY adds sequence
adjustment already, however from nf_nat_setup() assumes there's not.
Patch from Xin Long.
5) Fix burst arithmetics in nft_limit as Joe Stringer mentioned during
NFWS in Faro. Patch from Andy Zhou.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '.cocciconfig')
0 files changed, 0 insertions, 0 deletions