android_kernel_samsung_msm8976/net/ipv4/netfilter
Dmitry Mishin 74c9c0c17d [NETFILTER]: Fix {ip,ip6,arp}_tables hook validation
Commit 590bdf7fd2 introduced a regression
in match/target hook validation. mark_source_chains builds a bitmask
for each rule representing the hooks it can be reached from, which is
then used by the matches and targets to make sure they are only called
from valid hooks. The patch moved the match/target specific validation
before the mark_source_chains call, at which point the mask is always zero.

This patch returns back to the old order and moves the standard checks
to mark_source_chains. This allows to get rid of a special case for
standard targets as a nice side-effect.

Signed-off-by: Dmitry Mishin <dim@openvz.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2006-12-06 18:39:02 -08:00
..
arp_tables.c [NETFILTER]: Fix {ip,ip6,arp}_tables hook validation 2006-12-06 18:39:02 -08:00
arpt_mangle.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
arptable_filter.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
ip_conntrack_amanda.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_core.c [NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK 2006-12-02 21:31:33 -08:00
ip_conntrack_ftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_helper_h323.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_helper_pptp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_irc.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_netbios_ns.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_netlink.c [NETFILTER]: ctnetlink: rework conntrack fields dumping logic on events 2006-12-02 21:31:28 -08:00
ip_conntrack_proto_generic.c [NETFILTER]: Change tunables to __read_mostly 2006-09-22 15:18:54 -07:00
ip_conntrack_proto_gre.c [NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK 2006-12-02 21:31:33 -08:00
ip_conntrack_proto_icmp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_sctp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_tcp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_udp.c [NETFILTER]: Change tunables to __read_mostly 2006-09-22 15:18:54 -07:00
ip_conntrack_sip.c [NETFILTER]: sip conntrack: better NAT handling 2006-12-02 21:31:26 -08:00
ip_conntrack_standalone.c [NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK 2006-12-02 21:31:33 -08:00
ip_conntrack_tftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_amanda.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_core.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_ftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_helper.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_helper_h323.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_helper_pptp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_irc.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_proto_gre.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_proto_icmp.c [NETFILTER]: nf_conntrack: endian annotations 2006-12-02 22:05:08 -08:00
ip_nat_proto_tcp.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_proto_udp.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_proto_unknown.c
ip_nat_rule.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_sip.c [NETFILTER]: sip conntrack: better NAT handling 2006-12-02 21:31:26 -08:00
ip_nat_snmp_basic.c [NETFILTER]: ip_nat_snmp_basic annotations. 2006-12-02 21:27:17 -08:00
ip_nat_standalone.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ip_nat_tftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_queue.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
ip_tables.c [NETFILTER]: Fix {ip,ip6,arp}_tables hook validation 2006-12-06 18:39:02 -08:00
ipt_addrtype.c [IPV4]: inet_addr_type() annotations 2006-09-28 18:01:07 -07:00
ipt_ah.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
ipt_CLUSTERIP.c [NETFILTER]: Fix PROC_FS=n warnings 2006-12-02 21:31:34 -08:00
ipt_ECN.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_ecn.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
ipt_iprange.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_LOG.c [NETFILTER]: x_tables: add NFLOG target 2006-12-02 21:31:31 -08:00
ipt_MASQUERADE.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ipt_NETMAP.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ipt_owner.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
ipt_recent.c [NETFILTER]: ipt annotations 2006-09-28 18:03:02 -07:00
ipt_REDIRECT.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ipt_REJECT.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
ipt_SAME.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ipt_TCPMSS.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_TOS.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_tos.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_TTL.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_ttl.c [NETFILTER]: Rename init functions. 2006-03-28 17:02:48 -08:00
ipt_ULOG.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
iptable_filter.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
iptable_mangle.c [NET]: Rethink mark field in struct flowi 2006-12-02 21:21:39 -08:00
iptable_raw.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
Kconfig [NETFILTER]: Mark old IPv4-only connection tracking scheduled for removal 2006-12-02 22:11:01 -08:00
Makefile [NETFILTER]: nf_nat: add SNMP NAT helper port 2006-12-02 22:10:34 -08:00
nf_conntrack_l3proto_ipv4.c [NETFILTER]: nf_conntrack: EXPORT_SYMBOL cleanup 2006-12-02 22:11:25 -08:00
nf_conntrack_l3proto_ipv4_compat.c [NETFILTER]: nf_conntrack: /proc compatibility with old connection tracking 2006-12-02 21:31:20 -08:00
nf_conntrack_proto_icmp.c [NETFILTER]: nf_conntrack: EXPORT_SYMBOL cleanup 2006-12-02 22:11:25 -08:00
nf_nat_amanda.c [NETFILTER]: nf_conntrack/nf_nat: add amanda helper port 2006-12-02 22:08:26 -08:00
nf_nat_core.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_ftp.c [NETFILTER]: nf_nat: add FTP NAT helper port 2006-12-02 22:07:44 -08:00
nf_nat_h323.c [NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port 2006-12-02 22:08:46 -08:00
nf_nat_helper.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_irc.c [NETFILTER]: nf_conntrack/nf_nat: add IRC helper port 2006-12-02 22:09:06 -08:00
nf_nat_pptp.c [NETFILTER]: nf_conntrack/nf_nat: add PPTP helper port 2006-12-02 22:09:41 -08:00
nf_nat_proto_gre.c [NETFILTER]: nf_conntrack/nf_nat: add PPTP helper port 2006-12-02 22:09:41 -08:00
nf_nat_proto_icmp.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_proto_tcp.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_proto_udp.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_proto_unknown.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_rule.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_sip.c [NETFILTER]: nf_conntrack/nf_nat: add SIP helper port 2006-12-02 22:09:57 -08:00
nf_nat_snmp_basic.c [NETFILTER]: nf_nat: add SNMP NAT helper port 2006-12-02 22:10:34 -08:00
nf_nat_standalone.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_tftp.c [NETFILTER]: nf_conntrack/nf_nat: add TFTP helper port 2006-12-02 22:10:18 -08:00