Eric Dumazet baf60efa58 netfilter: xt_socket: fix broken v0 support ... commit 681f130f39 ("netfilter: xt_socket: add XT_SOCKET_NOWILDCARD flag") added a potential NULL dereference if an old iptables package uses v0 of the match. Fix this by removing the test on @info in fast path. IPv6 can remove the test as well, as it uses v1 or v2. Reported-by: Neal Cardwell <ncardwell@google.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Patrick McHardy <kaber@trash.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2013-07-15 11:15:21 +02:00
..
ipset	netfilter: ipset: set match: add support to match the counters	2013-04-29 20:09:03 +02:00
ipvs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-07-03 14:55:13 -07:00
core.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2013-06-06 01:03:06 -07:00
Kconfig	Driver core patches for 3.9-rc1	2013-02-21 12:05:51 -08:00
Makefile
nf_conntrack_acct.c
nf_conntrack_amanda.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_broadcast.c
nf_conntrack_core.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-05-01 14:08:52 -07:00
nf_conntrack_ecache.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_expect.c	netfilter: ctnetlink: fix incorrect NAT expectation dumping	2013-07-15 11:14:51 +02:00
nf_conntrack_extend.c
nf_conntrack_ftp.c	netfilter: Implement RFC 1123 for FTP conntrack	2013-05-27 13:32:43 +02:00
nf_conntrack_h323_asn1.c
nf_conntrack_h323_main.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_h323_types.c
nf_conntrack_helper.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_irc.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_l3proto_generic.c
nf_conntrack_labels.c	netfilter: ctnetlink: send event when conntrack label was modified	2013-06-24 11:32:56 +02:00
nf_conntrack_netbios_ns.c
nf_conntrack_netlink.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-07-03 14:55:13 -07:00
nf_conntrack_pptp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_dccp.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nf_conntrack_proto_generic.c
nf_conntrack_proto_gre.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_sctp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_tcp.c	netfilter: nf_conntrack: avoid large timeout for mid-stream pickup	2013-06-20 11:20:13 +02:00
nf_conntrack_proto_udp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_udplite.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nf_conntrack_sane.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_conntrack_sip.c	netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet	2013-04-06 14:03:18 +02:00
nf_conntrack_snmp.c
nf_conntrack_standalone.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
nf_conntrack_tftp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_timeout.c
nf_conntrack_timestamp.c
nf_internals.h
nf_log.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
nf_nat_amanda.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_nat_core.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2013-04-25 00:53:40 -04:00
nf_nat_ftp.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_nat_helper.c	netfilter: Correct calculation using skb->tail and skb-network_header	2013-05-31 16:38:25 -07:00
nf_nat_irc.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_nat_proto_common.c
nf_nat_proto_dccp.c
nf_nat_proto_sctp.c	sctp: Correct type and usage of sctp_end_cksum()	2013-04-29 20:09:08 +02:00
nf_nat_proto_tcp.c
nf_nat_proto_udp.c
nf_nat_proto_udplite.c
nf_nat_proto_unknown.c
nf_nat_sip.c	netfilter: nf_nat_sip: fix mangling	2013-06-24 11:32:40 +02:00
nf_nat_tftp.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_queue.c	netfilter: move skb_gso_segment into nfnetlink_queue module	2013-04-29 20:09:05 +02:00
nf_sockopt.c
nf_tproxy_core.c
nfnetlink.c	nfnetlink: add support for memory mapped netlink	2013-04-19 14:58:36 -04:00
nfnetlink_acct.c	netfilter: nfnetlink_acct: fix incomplete dumping of objects	2013-06-05 12:36:36 +02:00
nfnetlink_cthelper.c	netfilter: check return code from nla_parse_tested	2013-06-20 11:20:13 +02:00
nfnetlink_cttimeout.c	netfilter: check return code from nla_parse_tested	2013-06-20 11:20:13 +02:00
nfnetlink_log.c	netfilter: log: netns NULL ptr bug when calling from conntrack	2013-05-15 14:11:07 +02:00
nfnetlink_queue_core.c	netfilter: nf_queue: add NFQA_SKB_CSUM_NOTVERIFIED info flag	2013-06-30 18:15:48 +02:00
nfnetlink_queue_ct.c
x_tables.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
xt_addrtype.c	netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6	2013-05-23 11:58:55 +02:00
xt_AUDIT.c	netfilter: xt_AUDIT: only generate audit log when audit enabled	2013-03-04 14:45:25 +01:00
xt_bpf.c
xt_CHECKSUM.c
xt_CLASSIFY.c
xt_cluster.c
xt_comment.c
xt_connbytes.c
xt_connlabel.c
xt_connlimit.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
xt_connmark.c
xt_CONNSECMARK.c
xt_conntrack.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
xt_cpu.c
xt_CT.c	netfilter: xt_CT: optimize XT_CT_NOTRACK	2013-05-23 11:09:29 +02:00
xt_dccp.c
xt_devgroup.c
xt_dscp.c
xt_DSCP.c
xt_ecn.c
xt_esp.c
xt_hashlimit.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
xt_helper.c
xt_HL.c
xt_hl.c
xt_HMARK.c
xt_IDLETIMER.c
xt_iprange.c
xt_ipvs.c
xt_LED.c
xt_length.c
xt_limit.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
xt_LOG.c	netfilter: xt_LOG: fix mark logging for IPv6 packets	2013-05-29 12:29:18 +02:00
xt_mac.c
xt_mark.c
xt_multiport.c
xt_nat.c
xt_NETMAP.c
xt_nfacct.c
xt_NFLOG.c	netfilter: log: netns NULL ptr bug when calling from conntrack	2013-05-15 14:11:07 +02:00
xt_NFQUEUE.c	netfilter: xt_NFQUEUE: coalesce IPv4 and IPv6 hashing	2013-04-02 01:26:10 +02:00
xt_osf.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
xt_owner.c
xt_physdev.c
xt_pkttype.c
xt_policy.c
xt_quota.c
xt_rateest.c	net_sched: add 64bit rate estimators	2013-06-11 02:51:03 -07:00
xt_RATEEST.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
xt_realm.c
xt_recent.c	proc: Supply PDE attribute setting accessor functions	2013-05-01 17:29:18 -04:00
xt_REDIRECT.c
xt_repldata.h
xt_sctp.c
xt_SECMARK.c
xt_set.c	netfilter: ipset: set match: add support to match the counters	2013-04-29 20:09:03 +02:00
xt_socket.c	netfilter: xt_socket: fix broken v0 support	2013-07-15 11:15:21 +02:00
xt_state.c
xt_statistic.c
xt_string.c
xt_tcpmss.c
xt_TCPMSS.c	netfilter: xt_TCPMSS: Fix missing fragmentation handling	2013-06-12 11:06:19 +02:00
xt_TCPOPTSTRIP.c	netfilter: xt_TCPOPTSTRIP: don't use tcp_hdr()	2013-06-11 01:55:07 +02:00
xt_tcpudp.c
xt_TEE.c	net: pass info struct via netdevice notifier	2013-05-28 13:11:01 -07:00
xt_time.c
xt_TPROXY.c
xt_TRACE.c
xt_u32.c