Florian Westphal 330966e501 net: make skb_gso_segment error handling more robust ... skb_gso_segment has three possible return values: 1. a pointer to the first segmented skb 2. an errno value (IS_ERR()) 3. NULL. This can happen when GSO is used for header verification. However, several callers currently test IS_ERR instead of IS_ERR_OR_NULL and would oops when NULL is returned. Note that these call sites should never actually see such a NULL return value; all callers mask out the GSO bits in the feature argument. However, there have been issues with some protocol handlers erronously not respecting the specified feature mask in some cases. It is preferable to get 'have to turn off hw offloading, else slow' reports rather than 'kernel crashes'. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: David S. Miller <davem@davemloft.net>		2014-10-20 12:38:13 -04:00
..
ipset	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2014-10-08 21:40:54 -04:00
ipvs	netfilter: replace strnicmp with strncasecmp	2014-10-14 02:18:24 +02:00
Kconfig	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-10-02 11:25:43 -07:00
Makefile	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2014-09-10 12:46:32 -07:00
core.c	netfilter: HAVE_JUMP_LABEL instead of CONFIG_JUMP_LABEL	2014-08-25 10:45:28 +02:00
nf_conntrack_acct.c	…
nf_conntrack_amanda.c	…
nf_conntrack_broadcast.c	…
nf_conntrack_core.c	net: use reciprocal_scale() helper	2014-08-23 12:21:21 -07:00
nf_conntrack_ecache.c	netfilter: conntrack: remove timer from ecache extension	2014-06-25 19:15:38 +02:00
nf_conntrack_expect.c	net: use reciprocal_scale() helper	2014-08-23 12:21:21 -07:00
nf_conntrack_extend.c	…
nf_conntrack_ftp.c	netfilter: replace strnicmp with strncasecmp	2014-10-14 02:18:24 +02:00
nf_conntrack_h323_asn1.c	…
nf_conntrack_h323_main.c	netfilter: conntrack: seperate expect locking from nf_conntrack_lock	2014-03-07 11:41:01 +01:00
nf_conntrack_h323_types.c	…
nf_conntrack_helper.c	netfilter: conntrack: remove central spinlock nf_conntrack_lock	2014-03-07 11:41:13 +01:00
nf_conntrack_irc.c	…
nf_conntrack_l3proto_generic.c	…
nf_conntrack_labels.c	…
nf_conntrack_netbios_ns.c	…
nf_conntrack_netlink.c	net: use ktime_get_ns() and ktime_get_real_ns() helpers	2014-08-22 19:57:23 -07:00
nf_conntrack_pptp.c	netfilter: nf_conntrack: flush net_gre->keymap_list only from gre helper	2014-04-08 10:56:12 +02:00
nf_conntrack_proto.c	…
nf_conntrack_proto_dccp.c	…
nf_conntrack_proto_generic.c	netfilter: conntrack: disable generic tracking for known protocols	2014-09-29 12:17:49 +02:00
nf_conntrack_proto_gre.c	netfilter: nf_conntrack: flush net_gre->keymap_list only from gre helper	2014-04-08 10:56:12 +02:00
nf_conntrack_proto_sctp.c	…
nf_conntrack_proto_tcp.c	…
nf_conntrack_proto_udp.c	…
nf_conntrack_proto_udplite.c	…
nf_conntrack_sane.c	…
nf_conntrack_seqadj.c	…
nf_conntrack_sip.c	netfilter: replace strnicmp with strncasecmp	2014-10-14 02:18:24 +02:00
nf_conntrack_snmp.c	…
nf_conntrack_standalone.c	net: use ktime_get_ns() and ktime_get_real_ns() helpers	2014-08-22 19:57:23 -07:00
nf_conntrack_tftp.c	…
nf_conntrack_timeout.c	…
nf_conntrack_timestamp.c	…
nf_internals.h	…
nf_log.c	netfilter: replace strnicmp with strncasecmp	2014-10-14 02:18:24 +02:00
nf_log_common.c	netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)	2014-10-02 18:30:54 +02:00
nf_nat_amanda.c	…
nf_nat_core.c	net: use reciprocal_scale() helper	2014-08-23 12:21:21 -07:00
nf_nat_ftp.c	…
nf_nat_helper.c	…
nf_nat_irc.c	…
nf_nat_proto_common.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_dccp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_sctp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_tcp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_udp.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_udplite.c	netfilter: use IS_ENABLED() macro	2014-06-30 11:38:03 +02:00
nf_nat_proto_unknown.c	…
nf_nat_sip.c	netfilter: replace strnicmp with strncasecmp	2014-10-14 02:18:24 +02:00
nf_nat_tftp.c	…
nf_queue.c	netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)	2014-10-02 18:30:54 +02:00
nf_sockopt.c	netfilter: don't use mutex_lock_interruptible()	2014-08-08 16:47:23 +02:00
nf_synproxy_core.c	netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt	2014-02-05 17:46:06 +01:00
nf_tables_api.c	netfilter: nf_tables: restrict nat/masq expressions to nat chain type	2014-10-13 20:42:00 +02:00
nf_tables_core.c	netfilter: nf_tables: 64bit stats need some extra synchronization	2014-07-14 12:00:17 +02:00
nf_tables_inet.c	…
nfnetlink.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-10-02 11:25:43 -07:00
nfnetlink_acct.c	netfilter: nfnetlink_acct: add filter support to nfacct counter list/reset	2014-08-26 21:36:19 +02:00
nfnetlink_cthelper.c	…
nfnetlink_cttimeout.c	…
nfnetlink_log.c	netfilter: use IS_ENABLED(CONFIG_BRIDGE_NETFILTER)	2014-10-02 18:30:54 +02:00
nfnetlink_queue_core.c	net: make skb_gso_segment error handling more robust	2014-10-20 12:38:13 -04:00
nfnetlink_queue_ct.c	…
nft_bitwise.c	…
nft_byteorder.c	…
nft_cmp.c	netfilter: nf_tables: fix nft_cmp_fast failure on big endian for size < 4	2014-04-14 10:38:02 +02:00
nft_compat.c	netfilter: nft_compat: validate chain type in match/target	2014-10-18 14:14:07 +02:00
nft_counter.c	…
nft_ct.c	netfilter: nft_ct: split nft_ct_init() into two functions for get/set	2014-04-02 21:29:45 +02:00
nft_expr_template.c	…
nft_exthdr.c	…
nft_hash.c	netfilter: nft_hash: no need for rcu in the hash set destroy path	2014-09-03 10:57:06 +02:00
nft_immediate.c	netfilter: nf_tables: restore context for expression destructors	2014-03-08 12:35:17 +01:00
nft_limit.c	…
nft_log.c	netfilter: nft_log: fix coccinelle warnings	2014-06-29 13:55:08 +02:00
nft_lookup.c	netfilter: nf_tables: use new transaction infrastructure to handle sets	2014-05-19 12:06:10 +02:00
nft_masq.c	netfilter: nf_tables: restrict nat/masq expressions to nat chain type	2014-10-13 20:42:00 +02:00
nft_meta.c	netfilter: nf_tables: add devgroup support in meta expresion	2014-09-09 16:31:23 +02:00
nft_nat.c	netfilter: nft_nat: dump attributes if they are set	2014-10-18 14:16:13 +02:00
nft_payload.c	netfilter: nf_tables: check if payload length is a power of 2	2014-02-17 11:21:17 +01:00
nft_queue.c	netfilter: nf_tables: fix log/queue expressions for NFPROTO_INET	2014-02-06 11:41:38 +01:00
nft_rbtree.c	netfilter: nft_rbtree: no need for spinlock from set destroy path	2014-09-03 10:57:08 +02:00
nft_reject.c	netfilter: fix wrong arithmetics regarding NFT_REJECT_ICMPX_MAX	2014-10-07 20:16:31 +02:00
nft_reject_inet.c	netfilter: nft_reject: introduce icmp code abstraction for inet and bridge	2014-10-02 18:29:57 +02:00
x_tables.c	net/netfilter/x_tables.c: use __seq_open_private()	2014-09-26 18:42:29 +02:00
xt_AUDIT.c	netfilter: Convert uses of __constant_<foo> to <foo>	2014-03-13 14:13:19 +01:00
xt_CHECKSUM.c	…
xt_CLASSIFY.c	…
xt_CONNSECMARK.c	…
xt_CT.c	netfilter: nf_conntrack: don't release a conntrack with non-zero refcnt	2014-02-05 17:46:06 +01:00
xt_DSCP.c	…
xt_HL.c	…
xt_HMARK.c	net: use reciprocal_scale() helper	2014-08-23 12:21:21 -07:00
xt_IDLETIMER.c	…
xt_LED.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-08-05 18:46:26 -07:00
xt_LOG.c	netfilter: xt_LOG: add missing string format in nf_log_packet()	2014-06-28 18:50:35 +02:00
xt_NETMAP.c	…
xt_NFLOG.c	…
xt_NFQUEUE.c	…
xt_RATEEST.c	net: sched: make bstats per cpu and estimator RCU safe	2014-09-30 01:02:26 -04:00
xt_REDIRECT.c	…
xt_SECMARK.c	…
xt_TCPMSS.c	…
xt_TCPOPTSTRIP.c	…
xt_TEE.c	…
xt_TPROXY.c	…
xt_TRACE.c	…
xt_addrtype.c	…
xt_bpf.c	net: filter: split 'struct sk_filter' into socket and bpf parts	2014-08-02 15:03:58 -07:00
xt_cgroup.c	netfilter: x_tables: allow to use default cgroup match	2014-08-19 21:38:55 +02:00
xt_cluster.c	net: use reciprocal_scale() helper	2014-08-23 12:21:21 -07:00
xt_comment.c	…
xt_connbytes.c	netfilter: Convert pr_warning to pr_warn	2014-09-10 12:40:10 -07:00
xt_connlabel.c	…
xt_connlimit.c	netfilter: connlimit: move lock array out of struct connlimit_data	2014-04-03 23:52:13 +02:00
xt_connmark.c	…
xt_conntrack.c	…
xt_cpu.c	…
xt_dccp.c	…
xt_devgroup.c	…
xt_dscp.c	…
xt_ecn.c	…
xt_esp.c	…
xt_hashlimit.c	netfilter: Convert pr_warning to pr_warn	2014-09-10 12:40:10 -07:00
xt_helper.c	…
xt_hl.c	…
xt_ipcomp.c	netfilter: xt_ipcomp: Use ntohs to ease sparse warning	2014-02-19 11:41:25 +01:00
xt_iprange.c	…
xt_ipvs.c	…
xt_l2tp.c	…
xt_length.c	…
xt_limit.c	…
xt_mac.c	…
xt_mark.c	…
xt_multiport.c	…
xt_nat.c	…
xt_nfacct.c	netfilter: nfnetlink_acct: Adding quota support to accounting framework	2014-04-29 18:25:14 +02:00
xt_osf.c	netfilter: Add {ipt,ip6t}_osf aliases for xt_osf	2014-04-03 23:52:22 +02:00
xt_owner.c	…
xt_physdev.c	netfilter: explicit module dependency between br_netfilter and physdev	2014-10-02 18:30:57 +02:00
xt_pkttype.c	…
xt_policy.c	…
xt_quota.c	…
xt_rateest.c	…
xt_realm.c	…
xt_recent.c	net: use the new API kvfree()	2014-06-05 00:49:51 -07:00
xt_repldata.h	net: netfilter: LLVMLinux: vlais-netfilter	2014-06-07 11:44:39 -07:00
xt_sctp.c	…
xt_set.c	netfilter: ipset: Add skbinfo extension support to SET target.	2014-09-15 22:20:21 +02:00
xt_socket.c	…
xt_state.c	…
xt_statistic.c	…
xt_string.c	netfilter: xt_string: Remove unnecessary initialization of struct ts_state	2014-09-09 16:31:25 +02:00
xt_tcpmss.c	…
xt_tcpudp.c	…
xt_time.c	…
xt_u32.c	…