Joe Stringer 6709d8bdf7 netfilter: nf_conntrack: Support expectations in different zones ... commit 4b31814d20 upstream. When zones were originally introduced, the expectation functions were all extended to perform lookup using the zone. However, insertion was not modified to check the zone. This means that two expectations which are intended to apply for different connections that have the same tuple but exist in different zones cannot both be tracked. Fixes: 5d0aa2ccd4 (netfilter: nf_conntrack: add support for "conntrack zones") Signed-off-by: Joe Stringer <joestringer@nicira.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2015-10-22 14:37:50 -07:00
..
9p	9p: forgetting to cancel request on interrupted zero-copy RPC	2015-08-03 09:29:47 -07:00
802	net/802/mrp: fix lockdep splat	2013-05-14 13:02:30 -07:00
8021q	8021q: fix a potential memory leak	2014-07-28 08:00:04 -07:00
appletalk	appletalk: Fix socket referencing in skb	2014-07-28 08:00:05 -07:00
atm	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
ax25	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
batman-adv	batman-adv: set up network coding packet handlers during module init	2013-11-20 12:27:47 -08:00
bluetooth	Bluetooth: Avoid use of session socket after the session gets freed	2014-09-17 09:04:00 -07:00
bridge	bridge: mdb: fix double add notification	2015-10-01 12:07:36 +02:00
caif	unix/caif: sk_socket can disappear when state is unlocked	2015-06-22 16:55:51 -07:00
can	can: add missing initialisations in CAN related skbuffs	2015-03-26 15:00:58 +01:00
ceph	crush: fix a bug in tree bucket decode	2015-08-03 09:29:46 -07:00
core	fib_rules: fix fib rule dumps across multiple skbs	2015-10-01 12:07:38 +02:00
dcb	net: Use netlink_ns_capable to verify the permisions of netlink messages	2014-06-26 15:12:37 -04:00
dccp	net:dccp: do not report ICMP redirects to user space	2013-10-13 16:08:30 -07:00
decnet	net: Use netlink_ns_capable to verify the permisions of netlink messages	2014-06-26 15:12:37 -04:00
dns_resolver	dns_resolver: Null-terminate the right string	2014-07-28 08:00:06 -07:00
dsa	dsa: fix freeing of sparse port allocation	2013-03-25 12:23:41 -04:00
ethernet	net: add ETH_P_802_3_MIN	2013-03-28 01:20:42 -04:00
ieee802154	6lowpan: fix lockdep splats	2014-03-06 21:30:02 -08:00
ipv4	inet: frags: fix defragmented packet's IP header for af_packet	2015-10-01 12:07:37 +02:00
ipv6	net/ipv6: Correct PIM6 mrt_lock handling	2015-10-01 12:07:38 +02:00
ipx	ipx: fix locking regression in ipx_sendmsg and ipx_recvmsg	2014-12-06 15:05:47 -08:00
irda	net: irda: fix wait_until_sent poll timeout	2015-03-18 13:22:31 +01:00
iucv	af_iucv: wrong mapping of sent and confirmed skbs	2014-06-30 20:09:40 -07:00
key	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
l2tp	l2tp: fix race while getting PMTU on PPP pseudo-wire	2014-10-15 08:31:57 +02:00
lapb	net/lapb: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:40:01 -08:00
llc	net: llc: use correct size for sysctl timeout entries	2015-04-19 10:10:50 +02:00
mac80211	mac80211: enable assoc check for mesh interfaces	2015-10-01 12:07:29 +02:00
mac802154	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-04-30 03:55:20 -04:00
netfilter	netfilter: nf_conntrack: Support expectations in different zones	2015-10-22 14:37:50 -07:00
netlabel	netlabel: improve domain mapping validation	2013-05-19 14:49:55 -07:00
netlink	netlink: don't hold mutex in rcu callback when releasing mmapd ring	2015-10-01 12:07:37 +02:00
netrom	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
nfc	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
openvswitch	openvswitch: fix panic with multiple vlan headers	2014-10-15 08:31:57 +02:00
packet	packet: avoid out of bounds read in round robin fanout	2015-07-10 10:40:20 -07:00
phonet	net: Use netlink_ns_capable to verify the permisions of netlink messages	2014-06-26 15:12:37 -04:00
rds	rds: fix an integer overflow test in rds_info_getsockopt()	2015-10-01 12:07:37 +02:00
rfkill	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next	2013-04-22 14:58:14 -04:00
rose	net: rose: restore old recvmsg behavior	2014-01-15 15:28:49 -08:00
rxrpc	rxrpc: bogus MSG_PEEK test in rxrpc_recvmsg()	2015-03-26 15:00:56 +01:00
sched	net_sched: invoke ->attach() after setting dev->qdisc	2015-06-22 16:55:51 -07:00
sctp	sctp: fix race on protocol/netns initialization	2015-10-01 12:07:38 +02:00
sunrpc	SUNRPC: Fix a memory leak in the backchannel code	2015-08-03 09:29:47 -07:00
tipc	net/tipc: initialize security state for new connection socket	2015-10-01 12:07:35 +02:00
unix	unix/caif: sk_socket can disappear when state is unlocked	2015-06-22 16:55:51 -07:00
vmw_vsock	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
wimax
wireless	cfg80211: wext: clear sinfo struct before calling driver	2015-06-22 16:55:54 -07:00
x25	net: rework recvmsg handler msg_name and msg_namelen logic	2013-12-08 07:29:25 -08:00
xfrm	net: Use netlink_ns_capable to verify the permisions of netlink messages	2014-06-26 15:12:37 -04:00
compat.c	net: compat: Update get_compat_msghdr() to match copy_msghdr_from_user() behaviour	2015-03-26 15:00:56 +01:00
Kconfig	netlink: kconfig: move mmap i/o into netlink kconfig	2013-05-01 15:02:42 -04:00
Makefile	VSOCK: Introduce VM Sockets	2013-02-10 19:41:08 -05:00
nonet.c
socket.c	net: socket: Fix the wrong returns for recvmsg and sendmsg	2015-06-05 23:19:53 -07:00
sysctl_net.c	net: Update the sysctl permissions handler to test effective uid/gid	2013-10-13 16:08:34 -07:00