Jarno Rajahalme 5745b0be05 openvswitch: Fix checking for new expected connections. ... OVS should call into CT NAT for packets of new expected connections only when the conntrack state is persisted with the 'commit' option to the OVS CT action. The test for this condition is doubly wrong, as the CT status field is ANDed with the bit number (IPS_EXPECTED_BIT) rather than the mask (IPS_EXPECTED), and due to the wrong assumption that the expected bit would apply only for the first (i.e., 'new') packet of a connection, while in fact the expected bit remains on for the lifetime of an expected connection. The 'ctinfo' value IP_CT_RELATED derived from the ct status can be used instead, as it is only ever applicable to the 'new' packets of the expected connection. Fixes: 05752523e5 ('openvswitch: Interface with NAT.') Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Jarno Rajahalme <jarno@ovn.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2016-03-28 17:58:51 +02:00
..
6lowpan	6lowpan: iphc: fix SAM/DAM bit comment	2016-03-10 19:51:29 +01:00
9p	net/9p: convert to new CQ API	2016-03-10 20:54:09 -05:00
802
8021q	vlan: propagate gso_max_segs	2016-03-17 21:05:01 -04:00
appletalk	appletalk: fix erroneous return value	2016-02-18 14:59:34 -05:00
atm
ax25	ax25: add link layer header validation function	2016-03-09 22:13:01 -05:00
batman-adv	batman-adv: clarify CFG80211 dependency	2016-03-02 13:45:47 -05:00
bluetooth	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-03-19 10:05:34 -07:00
bridge	bridge: update max_gso_segs and max_gso_size	2016-03-21 13:35:56 -04:00
caif	net: caif: fix misleading indentation	2016-03-14 13:09:50 -04:00
can
ceph	Merge branch 'mm-pkeys-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2016-03-20 19:08:56 -07:00
core	netpoll: Fix extra refcount release in netpoll_cleanup()	2016-03-25 11:23:14 -04:00
dcb
dccp	tcp/dccp: remove obsolete WARN_ON() in icmp handlers	2016-03-17 21:06:40 -04:00
decnet	net: add validation for the socket syscall protocol argument	2015-12-14 16:09:30 -05:00
dns_resolver
dsa	net: dsa: refine netdev event notifier	2016-03-14 16:05:32 -04:00
ethernet	eth: Pull header from first fragment via eth_get_headlen	2016-02-24 13:58:05 -05:00
hsr
ieee802154	ieee802154: 6lowpan: fix return of netdev notifier	2016-02-23 20:29:40 +01:00
ipv4	Fix returned tc and hoplimit values for route with IPv6 encapsulation	2016-03-27 22:35:02 -04:00
ipv6	net: ping: make ping_v6_sendmsg static	2016-03-23 22:09:58 -04:00
ipx
irda	Merge 4.5-rc4 into tty-next	2016-02-14 14:36:04 -08:00
iucv	af_iucv: Validate socket address length in iucv_sock_bind()	2016-01-19 14:21:08 -05:00
kcm	kcm: Add receive message timeout	2016-03-09 16:36:15 -05:00
key
l2tp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-02-23 00:09:14 -05:00
l3mdev	net: l3mdev: address selection should only consider devices in L3 domain	2016-02-26 14:22:26 -05:00
lapb
llc	af_llc: fix types on llc_ui_wait_for_conn	2016-02-17 16:12:13 -05:00
mac80211	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-03-08 12:34:12 -05:00
mac802154	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-03-19 10:05:34 -07:00
mpls	mpls: autoload lwt module	2016-02-21 22:00:28 -05:00
netfilter	netfilter: ipset: fix race condition in ipset save, swap and delete	2016-03-28 17:57:45 +02:00
netlabel	netlabel: do not initialise statics to NULL	2016-03-07 11:08:26 -05:00
netlink	netlink: add support for NIC driver ioctls	2016-03-22 15:45:44 -04:00
netrom
nfc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-03-19 10:05:34 -07:00
openvswitch	openvswitch: Fix checking for new expected connections.	2016-03-28 17:58:51 +02:00
packet	packet: validate variable length ll headers	2016-03-09 22:13:01 -05:00
phonet	sock: struct proto hash function may error	2016-02-11 03:54:14 -05:00
rds	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-03-19 10:05:34 -07:00
rfkill	Here's another round of updates for -next:	2016-03-01 17:03:27 -05:00
rose
rxrpc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-03-19 10:05:34 -07:00
sched	cls_bpf: reset class and reuse major in da	2016-03-18 19:35:21 -04:00
sctp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-03-23 23:25:14 -07:00
sunrpc	Various bugfixes, a RDMA update from Chuck Lever, and support for a new	2016-03-24 10:41:00 -07:00
switchdev	switchdev: fix typo in comments/doc	2016-03-24 14:51:24 -04:00
tipc	tipc: make sure IPv6 header fits in skb headroom	2016-03-14 12:23:12 -04:00
unix	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-02-23 00:09:14 -05:00
vmw_vsock	AF_VSOCK: Shrink the area influenced by prepare_to_wait	2016-03-22 16:18:41 -04:00
wimax
wireless	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-03-19 10:05:34 -07:00
x25
xfrm	xfrm: Fix crash observed during device unregistration and decryption	2016-03-24 14:29:36 -04:00
compat.c
Kconfig	Make DST_CACHE a silent config option	2016-03-21 22:56:38 -04:00
Makefile	kcm: Kernel Connection Multiplexor module	2016-03-09 16:36:14 -05:00
socket.c	net: Fix use after free in the recvmmsg exit path	2016-03-14 12:41:49 -04:00
sysctl_net.c