Pablo Neira Ayuso 70c261d500 netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation ...

From netdev/egress, skb->len can include the ethernet header, therefore,
subtract network offset from skb->len when validating IPv6 packet length.

Fixes: 42df6e1d22 ("netfilter: Introduce egress hook")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2024-08-27 18:11:56 +02:00

..

ipv4

…

ipv6

…

br_netfilter.h

…

nf_bpf_link.h

bpf: minimal support for programs hooked into netfilter framework

2023-04-21 11:34:14 -07:00

nf_conntrack_acct.h

netfilter: conntrack: Remove unused function declarations

2023-08-08 13:02:00 +02:00

nf_conntrack_act_ct.h

net/sched: act_ct: Always fill offloading tuple iifidx

2023-11-08 17:47:08 -08:00

nf_conntrack_bpf.h

…

nf_conntrack_bridge.h

…

nf_conntrack_core.h

netfilter: conntrack: fix wrong ct->timeout value

2023-04-19 12:08:38 +02:00

nf_conntrack_count.h

…

nf_conntrack_ecache.h

…

nf_conntrack_expect.h

netfilter: allow exp not to be removed in nf_ct_find_expectation

2023-07-20 10:06:36 +02:00

nf_conntrack_extend.h

…

nf_conntrack_helper.h

netfilter: helper: Remove unused function declarations

2023-08-08 13:01:59 +02:00

nf_conntrack_l4proto.h

…

nf_conntrack_labels.h

netfilter: conntrack: switch connlabels to atomic_t

2023-10-24 13:16:30 +02:00

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

…

nf_conntrack_timeout.h

…

nf_conntrack_timestamp.h

…

nf_conntrack_tuple.h

netfilter: conntrack: don't fold port numbers into addresses before hashing

2023-07-05 14:42:16 +02:00

nf_conntrack_zones.h

…

nf_conntrack.h

netfilter: conntrack: simplify nf_conntrack_alter_reply

2023-10-10 16:34:28 +02:00

nf_dup_netdev.h

…

nf_flow_table.h

netfilter: Add bpf_xdp_flow_lookup kfunc

2024-07-01 17:03:01 +02:00

nf_hooks_lwtunnel.h

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

nf_log.h

…

nf_nat_helper.h

…

nf_nat_masquerade.h

…

nf_nat_redirect.h

netfilter: nft_redir: use struct nf_nat_range2 throughout and deduplicate eval call-backs

2023-03-22 21:48:59 +01:00

nf_nat.h

net: move the nat function to nf_nat_ovs for ovs and tc

2022-12-12 10:14:03 +00:00

nf_queue.h

netfilter: move nf_reinject into nfnetlink_queue modules

2024-02-21 12:03:22 +01:00

nf_reject.h

…

nf_socket.h

…

nf_synproxy.h

…

nf_tables_core.h

x86/bugs: Rename CONFIG_RETPOLINE => CONFIG_MITIGATION_RETPOLINE

2024-01-10 10:52:28 +01:00

nf_tables_ipv4.h

netfilter: nf_tables: restore IP sanity checks for netdev/egress

2024-08-26 13:05:28 +02:00

nf_tables_ipv6.h

netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation

2024-08-27 18:11:56 +02:00

nf_tables_offload.h

…

nf_tables.h

Merge tag 'nf-next-24-06-28' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next into main

2024-07-01 09:52:35 +01:00

nf_tproxy.h

netfilter: tproxy: fix deadlock due to missing BH disable

2023-03-06 12:09:48 +01:00

nft_fib.h

netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters

2022-11-15 10:46:34 +01:00

nft_meta.h

netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters

2022-11-15 10:46:34 +01:00

nft_reject.h

netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters

2022-11-15 10:46:34 +01:00

xt_rateest.h

…