Patrick McHardy 048a424c28 netfilter: fix crashes in bridge netfilter caused by fragment jumps ... commit 8fa9ff6849 upstream. When fragments from bridge netfilter are passed to IPv4 or IPv6 conntrack and a reassembly queue with the same fragment key already exists from reassembling a similar packet received on a different device (f.i. with multicasted fragments), the reassembled packet might continue on a different codepath than where the head fragment originated. This can cause crashes in bridge netfilter when a fragment received on a non-bridge device (and thus with skb->nf_bridge == NULL) continues through the bridge netfilter code. Add a new reassembly identifier for packets originating from bridge netfilter and use it to put those packets in insolated queues. Fixes http://bugzilla.kernel.org/show_bug.cgi?id=14805 Reported-and-Tested-by: Chong Qiao <qiaochong@loongson.cn> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>		2010-01-06 15:04:40 -08:00
..
acpi	ACPI: remove acpi_device_uid() and related stuff	2009-09-25 15:09:49 -04:00
asm-generic	fcntl: rename F_OWNER_GID to F_OWNER_PGRP	2009-11-17 17:40:33 -08:00
crypto
drm	drm/i915: Fix sync to vblank when VGA output is turned off	2009-12-18 14:05:26 -08:00
keys
linux	NOMMU: Optimise away the {dac_,}mmap_min_addr tests	2010-01-06 15:04:30 -08:00
math-emu
media	V4L/DVB (13019): video: initial support for ADV7180	2009-09-19 00:53:39 -03:00
mtd
net	netfilter: fix crashes in bridge netfilter caused by fragment jumps	2010-01-06 15:04:40 -08:00
pcmcia	PM / yenta: Split resume into early and late parts (rev. 4)	2009-11-03 10:54:58 +01:00
rdma	trivial: fix typo "to to" in multiple files	2009-09-21 15:14:55 +02:00
rxrpc
scsi	SCSI: osd_protocol.h: Add missing #include	2009-12-14 09:44:45 -08:00
sound
trace	tracing: Fix event format export	2009-12-18 14:05:16 -08:00
video	davinci-fb-frame-buffer-driver-for-ti-da8xx-omap-l1xx-v4	2009-09-23 07:39:51 -07:00
xen
Kbuild