linux-stable/net/dccp
Madhu Koriginja d2ef964faf netfilter: keep conntrack reference until IPsecv6 policy checks are done
[ Upstream commit b0e214d212 ]

Keep the conntrack reference until policy checks have been performed for
IPsec V6 NAT support, just like ipv4.

The reference needs to be dropped before a packet is
queued to avoid having the conntrack module unloadable.

Fixes: 58a317f106 ("netfilter: ipv6: add IPv6 NAT support")
Signed-off-by: Madhu Koriginja <madhu.koriginja@nxp.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-05-11 23:11:09 +09:00
..
ccids
Kconfig
Makefile
ackvec.c
ackvec.h
ccid.c
ccid.h
dccp.h dccp: Call inet6_destroy_sock() via sk->sk_destruct(). 2022-10-24 09:40:38 +01:00
diag.c
feat.c
feat.h
input.c
ipv4.c dccp/tcp: Fixup bhash2 bucket when connect() fails. 2022-11-22 20:15:37 -08:00
ipv6.c netfilter: keep conntrack reference until IPsecv6 policy checks are done 2023-05-11 23:11:09 +09:00
ipv6.h
minisocks.c tcp: allocate tcp_death_row outside of struct netns_ipv4 2022-01-26 19:00:31 -08:00
options.c
output.c
proto.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2022-11-29 13:04:52 -08:00
qpolicy.c
sysctl.c
timer.c
trace.h net: dccp: Use memset_startat() for TP zeroing 2021-11-19 11:22:49 +00:00