Dmitry Mishin f6677f4312 [NETFILTER]: Fix iptables compat hook validation ...

In compat mode, matches and targets valid hooks checks always successful due
to not initialized e->comefrom field yet. This patch separates this checks from
translation code and moves them after mark_source_chains() call, where these
marks are initialized.

Signed-off-by: Dmitry Mishin <dim@openvz.org>
Signed-off-by; Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-12-06 18:39:03 -08:00

..

arp_tables.c

[NETFILTER]: Fix {ip,ip6,arp}_tables hook validation

2006-12-06 18:39:02 -08:00

arpt_mangle.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

arptable_filter.c

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22 14:55:33 -07:00

ip_conntrack_amanda.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_conntrack_core.c

[NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK

2006-12-02 21:31:33 -08:00

ip_conntrack_ftp.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_conntrack_helper_h323.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_conntrack_helper_pptp.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_conntrack_irc.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_conntrack_netbios_ns.c

[NETFILTER]: conntrack annotations

2006-09-28 18:03:00 -07:00

ip_conntrack_netlink.c

[NETFILTER]: ctnetlink: rework conntrack fields dumping logic on events

2006-12-02 21:31:28 -08:00

ip_conntrack_proto_generic.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_conntrack_proto_gre.c

[NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK

2006-12-02 21:31:33 -08:00

ip_conntrack_proto_icmp.c

[NETFILTER]: conntrack annotations

2006-09-28 18:03:00 -07:00

ip_conntrack_proto_sctp.c

[NETFILTER]: conntrack annotations

2006-09-28 18:03:00 -07:00

ip_conntrack_proto_tcp.c

[NETFILTER]: conntrack annotations

2006-09-28 18:03:00 -07:00

ip_conntrack_proto_udp.c

[NETFILTER]: Change tunables to __read_mostly

2006-09-22 15:18:54 -07:00

ip_conntrack_sip.c

[NETFILTER]: sip conntrack: better NAT handling

2006-12-02 21:31:26 -08:00

ip_conntrack_standalone.c

[NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK

2006-12-02 21:31:33 -08:00

ip_conntrack_tftp.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_nat_amanda.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_nat_core.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ip_nat_ftp.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_nat_helper_h323.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_nat_helper_pptp.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_nat_helper.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ip_nat_irc.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_nat_proto_gre.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ip_nat_proto_icmp.c

[NETFILTER]: nf_conntrack: endian annotations

2006-12-02 22:05:08 -08:00

ip_nat_proto_tcp.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ip_nat_proto_udp.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ip_nat_proto_unknown.c

[NETFILTER]: Remove unused function from NAT protocol helpers

2006-01-10 12:54:34 -08:00

ip_nat_rule.c

[NETFILTER]: NAT annotations

2006-09-28 18:03:01 -07:00

ip_nat_sip.c

[NETFILTER]: sip conntrack: better NAT handling

2006-12-02 21:31:26 -08:00

ip_nat_snmp_basic.c

[NETFILTER]: ip_nat_snmp_basic annotations.

2006-12-02 21:27:17 -08:00

ip_nat_standalone.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

ip_nat_tftp.c

[NETFILTER]: ip_conntrack: fix NAT helper unload races

2006-12-02 21:31:22 -08:00

ip_queue.c

[NET]: Turn nfmark into generic mark

2006-12-02 21:21:38 -08:00

ip_tables.c

[NETFILTER]: Fix iptables compat hook validation

2006-12-06 18:39:03 -08:00

ipt_addrtype.c

[IPV4]: inet_addr_type() annotations

2006-09-28 18:01:07 -07:00

ipt_ah.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_CLUSTERIP.c

[NETFILTER]: Fix PROC_FS=n warnings

2006-12-02 21:31:34 -08:00

ipt_ecn.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_ECN.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ipt_iprange.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ipt_LOG.c

[NETFILTER]: x_tables: add NFLOG target

2006-12-02 21:31:31 -08:00

ipt_MASQUERADE.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

ipt_NETMAP.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

ipt_owner.c

[NETFILTER]: x_tables: remove unused size argument to check/destroy functions

2006-09-22 14:55:34 -07:00

ipt_recent.c

[NETFILTER]: ipt annotations

2006-09-28 18:03:02 -07:00

ipt_REDIRECT.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

ipt_REJECT.c

[NET]: Turn nfmark into generic mark

2006-12-02 21:21:38 -08:00

ipt_SAME.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

ipt_TCPMSS.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ipt_tos.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ipt_TOS.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ipt_ttl.c

[NETFILTER]: Rename init functions.

2006-03-28 17:02:48 -08:00

ipt_TTL.c

[NET]: netfilter checksum annotations

2006-12-02 21:23:42 -08:00

ipt_ULOG.c

[NET]: Turn nfmark into generic mark

2006-12-02 21:21:38 -08:00

iptable_filter.c

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22 14:55:33 -07:00

iptable_mangle.c

[NET]: Rethink mark field in struct flowi

2006-12-02 21:21:39 -08:00

iptable_raw.c

[NETFILTER]: x_tables: remove unused argument to target functions

2006-09-22 14:55:33 -07:00

Kconfig

[NETFILTER]: Mark old IPv4-only connection tracking scheduled for removal

2006-12-02 22:11:01 -08:00

Makefile

[NETFILTER]: nf_nat: add SNMP NAT helper port

2006-12-02 22:10:34 -08:00

nf_conntrack_l3proto_ipv4_compat.c

[NETFILTER]: nf_conntrack: /proc compatibility with old connection tracking

2006-12-02 21:31:20 -08:00

nf_conntrack_l3proto_ipv4.c

[NETFILTER]: nf_conntrack: EXPORT_SYMBOL cleanup

2006-12-02 22:11:25 -08:00

nf_conntrack_proto_icmp.c

[NETFILTER]: nf_conntrack: EXPORT_SYMBOL cleanup

2006-12-02 22:11:25 -08:00

nf_nat_amanda.c

[NETFILTER]: nf_conntrack/nf_nat: add amanda helper port

2006-12-02 22:08:26 -08:00

nf_nat_core.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_ftp.c

[NETFILTER]: nf_nat: add FTP NAT helper port

2006-12-02 22:07:44 -08:00

nf_nat_h323.c

[NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port

2006-12-02 22:08:46 -08:00

nf_nat_helper.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_irc.c

[NETFILTER]: nf_conntrack/nf_nat: add IRC helper port

2006-12-02 22:09:06 -08:00

nf_nat_pptp.c

[NETFILTER]: nf_conntrack/nf_nat: add PPTP helper port

2006-12-02 22:09:41 -08:00

nf_nat_proto_gre.c

[NETFILTER]: nf_conntrack/nf_nat: add PPTP helper port

2006-12-02 22:09:41 -08:00

nf_nat_proto_icmp.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_proto_tcp.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_proto_udp.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_proto_unknown.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_rule.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_sip.c

[NETFILTER]: nf_conntrack/nf_nat: add SIP helper port

2006-12-02 22:09:57 -08:00

nf_nat_snmp_basic.c

[NETFILTER]: nf_nat: add SNMP NAT helper port

2006-12-02 22:10:34 -08:00

nf_nat_standalone.c

[NETFILTER]: Add NAT support for nf_conntrack

2006-12-02 22:07:13 -08:00

nf_nat_tftp.c

[NETFILTER]: nf_conntrack/nf_nat: add TFTP helper port

2006-12-02 22:10:18 -08:00