Pablo Neira Ayuso f0d1f04f0a netfilter: fix wrong arithmetics regarding NFT_REJECT_ICMPX_MAX ... NFT_REJECT_ICMPX_MAX should be __NFT_REJECT_ICMPX_MAX - 1. nft_reject_icmp_code() and nft_reject_icmpv6_code() are called from the packet path, so BUG_ON in case we try to access an unknown abstracted ICMP code. This should not happen since we already validate this from nft_reject_{inet,bridge}_init(). Fixes: 51b0a5d ("netfilter: nft_reject: introduce icmp code abstraction for inet and bridge") Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2014-10-07 20:16:31 +02:00
..
acpi	Merge branches 'acpi-hotplug', 'acpi-scan', 'acpi-lpss', 'acpi-gpio' and 'acpi-video'	2014-09-25 22:59:30 +02:00
asm-generic	…
clocksource	…
crypto	crypto: drbg - backport "fix maximum value checks on 32 bit systems"	2014-09-05 15:52:28 +08:00
drm	drm/radeon: add additional SI pci ids	2014-08-22 10:47:59 -04:00
dt-bindings	…
keys	…
kvm	…
linux	net/mlx4_en: Code cleanups in tx path	2014-10-06 01:04:15 -04:00
math-emu	…
media	[media] vb2: fix VBI/poll regression	2014-09-21 20:57:30 -03:00
memory	…
misc	…
net	netfilter: kill nf_send_reset6() from include/net/netfilter/ipv6/nf_reject.h	2014-10-07 19:58:07 +02:00
pcmcia	…
ras	…
rdma	IB: ib_umem_release() should decrement mm->pinned_vm from ib_umem_get	2014-09-19 09:55:42 -07:00
rxrpc	include/rxrpc/types.h: Remove unused header	2014-08-29 20:33:39 -07:00
scsi	[SCSI] fix regression that accidentally disabled block-based tcq	2014-09-19 13:23:32 +01:00
soc/tegra	…
sound	ASoC: core: fix .info for SND_SOC_BYTES_TLV	2014-08-18 08:59:12 -05:00
target	…
trace	net: treewide: Fix typo found in DocBook/networking.xml	2014-09-05 17:35:28 -07:00
uapi	netfilter: fix wrong arithmetics regarding NFT_REJECT_ICMPX_MAX	2014-10-07 20:16:31 +02:00
video	…
xen	xen/arm: introduce XENFEAT_grant_map_identity	2014-09-11 18:11:52 +00:00
Kbuild	…