Patrick McHardy 1e856b3bc1 ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery ...

commit 0b5ccb2ee250136dd7385b1c7da28417d0d4d32d upstream.

Currently the same reassembly queue might be used for packets reassembled
by conntrack in different positions in the stack (PREROUTING/LOCAL_OUT),
as well as local delivery. This can cause "packet jumps" when the fragment
completing a reassembled packet is queued from a different position in the
stack than the previous ones.

Add a "user" identifier to the reassembly queue key to seperate the queues
of each caller, similar to what we do for IPv4.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-01-06 14:26:41 -08:00

..

ipv4

netfilter: nf_ct_icmp: keep the ICMP ct entries longer

2009-06-08 15:53:43 +02:00

ipv6

ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery

2010-01-06 14:26:41 -08:00

nf_conntrack_acct.h

netfilter: netns nf_conntrack: per-netns conntrack accounting

2008-10-08 11:35:09 +02:00

nf_conntrack_core.h

netfilter: conntrack: don't deliver events for racy packets

2009-03-16 15:06:42 +01:00

nf_conntrack_ecache.h

netfilter: conntrack: optional reliable conntrack event delivery

2009-06-13 12:30:52 +02:00

nf_conntrack_expect.h

netfilter: ctnetlink: fix regression in expectation handling

2009-04-06 17:47:20 +02:00

nf_conntrack_extend.h

netfilter: conntrack: move event caching to conntrack extension infrastructure

2009-06-13 12:26:29 +02:00

nf_conntrack_helper.h

netfilter: conntrack: move helper destruction to nf_ct_helper_destroy()

2009-06-13 12:28:22 +02:00

nf_conntrack_l3proto.h

netfilter: ctnetlink: add callbacks to the per-proto nlattrs

2009-03-25 18:24:48 +01:00

nf_conntrack_l4proto.h

netfilter: nf_conntrack: use per-conntrack locks for protocol data

2009-06-10 14:32:47 +02:00

nf_conntrack_tuple.h

netfilter: nf_conntrack: use SLAB_DESTROY_BY_RCU and get rid of call_rcu()

2009-03-25 21:05:46 +01:00

nf_conntrack.h

netfilter: nf_nat: fix NAT issue in 2.6.30.4+

2009-12-08 10:22:33 -08:00

nf_log.h

netfilter: use a linked list of loggers

2009-03-16 14:54:21 +01:00

nf_nat_core.h

netfilter: ctnetlink: remove bogus module dependency between ctnetlink and nf_nat

2008-10-14 11:58:31 -07:00

nf_nat_helper.h

netfilter: nf_nat: fix NAT issue in 2.6.30.4+

2009-12-08 10:22:33 -08:00

nf_nat_protocol.h

[NETFILTER]: nf_nat: use bool type in nf_nat_proto

2008-04-14 11:15:53 +02:00

nf_nat_rule.h

[NETFILTER]: nf_nat: don't add NAT extension for confirmed conntracks

2008-04-14 11:15:51 +02:00

nf_nat.h

netfilter: nf_nat: add support for persistent mappings

2009-04-16 18:33:01 +02:00

nf_queue.h

netfilter: Use unsigned types for hooknum and pf vars

2008-10-08 11:35:00 +02:00

nf_tproxy_core.h

netfilter: iptables tproxy core

2008-10-08 11:35:12 +02:00

nfnetlink_log.h

netfilter: nfnetlink_log: fix warning and prototype mismatch

2008-11-18 12:16:52 +01:00

xt_rateest.h

net: restore gnet_stats_basic to previous definition

2009-08-17 21:33:49 -07:00