GitHub PushEvent at 2014-05-24 01:04:33
Repository: linux
Actor: RobertCNelson
Payload: {"shas":[["5596732fa8c14139018ecda8356eabbfb599d830","66deb1d63f85161cc287ce2bac0c65cb5ae958a7@secunet.com","xfrm: Fix crash with ipv6 IPsec tunnel and NAT.\n\nThe ipv6 xfrm output path is not aware that packets can be\nrerouted by NAT to not use IPsec. We crash in this case\nbecause we expect to have a xfrm state at the dst_entry.\nThis crash happens if the ipv6 layer does IPsec and NAT\nor if we have an interfamily IPsec tunnel with ipv4 NAT.\n\nWe fix this by checking for a NAT rerouted packet in each\naddress family and dst_output() to the new destination\nin this case.\n\nReported-by: Martin Pelikan <martin.pelikan@gmail.com>\nTested-by: Martin Pelikan <martin.pelikan@gmail.com>\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","Steffen Klassert",true],["ef67f18dece707eb2fb1ef25ccca47062842dc4a","344470f2ae3d43c115823f3f9ccfaeed124712ee@intel.com","iwlwifi: mvm: several fixes in scan\n\nThe firmware doesn't handle properly the fragmented scan.\nStop using it.\nWhile at it change max_out_time and suspend_time units from\nusec to TUs as expected by firmware API.\n\nSigned-off-by: Alexander Bondar <alexander.bondar@intel.com>\nSigned-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>","Alexander Bondar",true],["a32452366b7250c42e96a18ffc3ad8db9e0ca3c2","66deb1d63f85161cc287ce2bac0c65cb5ae958a7@secunet.com","vti4: Don't count header length twice.\n\nWe currently count the size of LL_MAX_HEADER and struct iphdr\ntwice for vti4 devices, this leads to a wrong device mtu.\nThe size of LL_MAX_HEADER and struct iphdr is already counted in\nip_tunnel_bind_dev(), so don't do it again in vti_tunnel_init().\n\nFixes: b9959fd3 (\"vti: switch to new ip tunnel code\")\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","Steffen Klassert",true],["062f1d6de01df545ca0df366c6133f0fa164bff6","06347be8a1534b1f0025d629ea7c7ce02309a6de@gmail.com","mac80211: avoid handling of SMPS for mesh\n\nThe patch \"mac80211: implement SMPS for AP\" has caused kernel\noops at mesh STA if the peer mesh STA operates in sleep mode\nand then becomes active mode. It can be easily reproduced by\nsetting the following commands at peer mesh STA:\n\niw mesh0 station set aa:bb:cc:dd:ee:ff mesh_power_mode deep\niw mesh0 station set aa:bb:cc:dd:ee:ff mesh_power_mode active\n\nKernel oops will happen at mesh STA aa:bb:cc:dd:ee:ff.\n\nFix this by avoiding SMPS for mesh mode.\n\nSigned-off-by: Chun-Yeow Yeoh <yeohchunyeow@gmail.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>","Chun-Yeow Yeoh",true],["311ab8e1c28659e16a6fe14a68929c3ced4a5757","b1c1d8736f20db3fb6c1c66bb1455ed43909f0d8@bobcopeland.com","mac80211: fixup radiotap tx flags for RTS/CTS\n\nWhen using RTS/CTS, the CTS-to-Self bit in radiotap TX flags is\ngetting set instead of the RTS bit.  Set the correct one.\n\nReported-by: Larry Maxwell <larrymaxwell@agilemesh.com>\nSigned-off-by: Bob Copeland <bob@cozybit.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>","Bob Copeland",true],["61622cc6f29034d0479f7ac16f3d48f1eeabf3a1","66deb1d63f85161cc287ce2bac0c65cb5ae958a7@secunet.com","xfrm4: Properly handle unsupported protocols\n\nWe don't catch the case if an unsupported protocol is submitted\nto the xfrm4 protocol handlers, this can lead to NULL pointer\ndereferences. Fix this by adding the appropriate checks.\n\nFixes: 3328715e (\"xfrm4: Add IPsec protocol multiplexer\")\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","Steffen Klassert",true],["fe337ac2839521b360f828b3ebd992d597b1ad16","cef439e78636cdab99cd2923826c5065a0743e5b@strlen.de","netfilter: ctnetlink: don't add null bindings if no nat requested\n\ncommit 0eba801b64cc8284d9024c7ece30415a2b981a72 tried to fix a race\nwhere nat initialisation can happen after ctnetlink-created conntrack\nhas been created.\n\nHowever, it causes the nat module(s) to be loaded needlessly on\nsystems that are not using NAT.\n\nFortunately, we do not have to create null bindings in that case.\n\nconntracks injected via ctnetlink always have the CONFIRMED bit set,\nwhich prevents addition of the nat extension in nf_nat_ipv4/6_fn().\n\nWe only need to make sure that either no nat extension is added\nor that we've created both src and dst manips.\n\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","Florian Westphal",true],["895162b1101b3ea5db08ca6822ae9672717efec0","cef439e78636cdab99cd2923826c5065a0743e5b@strlen.de","netfilter: ipv4: defrag: set local_df flag on defragmented skb\n\nelse we may fail to forward skb even if original fragments do fit\noutgoing link mtu:\n\n1. remote sends 2k packets in two 1000 byte frags, DF set\n2. we want to forward but only see '2k > mtu and DF set'\n3. we then send icmp error saying that outgoing link is 1500\n\nBut original sender never sent a packet that would not fit\nthe outgoing link.\n\nSetting local_df makes outgoing path test size vs.\nIPCB(skb)->frag_max_size, so we will still send the correct\nerror in case the largest original size did not fit\noutgoing link mtu.\n\nReported-by: Maxime Bizon <mbizon@freebox.fr>\nSuggested-by: Maxime Bizon <mbizon@freebox.fr>\nFixes: 5f2d04f1f9 (ipv4: fix path MTU discovery with connection tracking)\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","Florian Westphal",true],["ecd15dd7e45f3683fa8142b9f2c015dfaa0c243d","8706ec3f111c78c54a5cd6e4738cec6108099ea4@nuclearcat.com","netfilter: nfnetlink: Fix use after free when it fails to process batch\n\nThis bug manifests when calling the nft command line tool without\nnf_tables kernel support.\n\nkernel message:\n[   44.071555] Netfilter messages via NETLINK v0.30.\n[   44.072253] BUG: unable to handle kernel NULL pointer dereference at 0000000000000119\n[   44.072264] IP: [<ffffffff8171db1f>] netlink_getsockbyportid+0xf/0x70\n[   44.072272] PGD 7f2b74067 PUD 7f2b73067 PMD 0\n[   44.072277] Oops: 0000 [#1] SMP\n[...]\n[   44.072369] Call Trace:\n[   44.072373]  [<ffffffff8171fd81>] netlink_unicast+0x91/0x200\n[   44.072377]  [<ffffffff817206c9>] netlink_ack+0x99/0x110\n[   44.072381]  [<ffffffffa004b951>] nfnetlink_rcv+0x3c1/0x408 [nfnetlink]\n[   44.072385]  [<ffffffff8171fde3>] netlink_unicast+0xf3/0x200\n[   44.072389]  [<ffffffff817201ef>] netlink_sendmsg+0x2ff/0x740\n[   44.072394]  [<ffffffff81044752>] ? __mmdrop+0x62/0x90\n[   44.072398]  [<ffffffff816dafdb>] sock_sendmsg+0x8b/0xc0\n[   44.072403]  [<ffffffff812f1af5>] ? copy_user_enhanced_fast_string+0x5/0x10\n[   44.072406]  [<ffffffff816dbb6c>] ? move_addr_to_kernel+0x2c/0x50\n[   44.072410]  [<ffffffff816db423>] ___sys_sendmsg+0x3c3/0x3d0\n[   44.072415]  [<ffffffff811301ba>] ? handle_mm_fault+0xa9a/0xc60\n[   44.072420]  [<ffffffff811362d6>] ? mmap_region+0x166/0x5a0\n[   44.072424]  [<ffffffff817da84c>] ? __do_page_fault+0x1dc/0x510\n[   44.072428]  [<ffffffff812b8b2c>] ? apparmor_capable+0x1c/0x60\n[   44.072435]  [<ffffffff817d6e9a>] ? _raw_spin_unlock_bh+0x1a/0x20\n[   44.072439]  [<ffffffff816dfc86>] ? release_sock+0x106/0x150\n[   44.072443]  [<ffffffff816dc212>] __sys_sendmsg+0x42/0x80\n[   44.072446]  [<ffffffff816dc262>] SyS_sendmsg+0x12/0x20\n[   44.072450]  [<ffffffff817df616>] system_call_fastpath+0x1a/0x1f\n\nSigned-off-by: Denys Fedoryshchenko <nuclearcat@nuclearcat.com>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","Denys Fedoryshchenko",true],["f4ebddf9abb1fb0add1ce8e9c0bc414f1c17d81d","35b1cb25ad22a15c873242a24069a9b71f851b2d@gmail.com","mac80211: Fix mac80211 station info rx bitrate for IBSS mode\n\nFilter out incoming multicast packages before applying their bitrate\nto the rx bitrate station info field to prevent them from setting the\nrx bitrate to the basic multicast rate.\n\nSigned-off-by: Henning Rogge <hrogge@gmail.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>","Henning Rogge",true],["c1fbb258846dfc425507a093922d2d001e54c3ea","fdf5551f20996bc0613832b4b54eb06eecaffd38@wizery.com","cfg80211: free sme on connection failures\n\ncfg80211 is notified about connection failures by\n__cfg80211_connect_result() call. However, this\nfunction currently does not free cfg80211 sme.\n\nThis results in hanging connection attempts in some cases\n\ne.g. when mac80211 authentication attempt is denied,\nwe have this function call:\nieee80211_rx_mgmt_auth() -> cfg80211_rx_mlme_mgmt() ->\ncfg80211_process_auth() -> cfg80211_sme_rx_auth() ->\n__cfg80211_connect_result()\n\nbut cfg80211_sme_free() is never get called.\n\nFixes: ceca7b712 (\"cfg80211: separate internal SME implementation\")\nCc: stable@vger.kernel.org (3.10+)\nSigned-off-by: Eliad Peller <eliadx.peller@intel.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>","Eliad Peller",true],["792e6aa7a15ea0fb16f8687e93caede1ea9118c7","fdf5551f20996bc0613832b4b54eb06eecaffd38@wizery.com","cfg80211: add cfg80211_sched_scan_stopped_rtnl\n\nAdd locked-version for cfg80211_sched_scan_stopped.\nThis is used for some users that might want to\ncall it when rtnl is already locked.\n\nFixes: d43c6b6 (\"mac80211: reschedule sched scan after HW restart\")\nCc: stable@vger.kernel.org (3.14+)\nSigned-off-by: Eliad Peller <eliadx.peller@intel.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>","Eliad Peller",true],["e669ba2d06c6195662601956454ac959892f0762","fdf5551f20996bc0613832b4b54eb06eecaffd38@wizery.com","mac80211: fix nested rtnl locking on ieee80211_reconfig\n\nieee80211_reconfig already holds rtnl, so calling\ncfg80211_sched_scan_stopped results in deadlock.\n\nUse the rtnl-version of this function instead.\n\nFixes: d43c6b6 (\"mac80211: reschedule sched scan after HW restart\")\nCc: stable@vger.kernel.org (3.14+)\nSigned-off-by: Eliad Peller <eliadx.peller@intel.com>\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>","Eliad Peller",true],["7c3d5ab1f35f5475b1a1fbe74143683cfc092d33","92a5505f10e70d6be04c6ea75cda66fdd7decf37@parallels.com","ipv4: fix \"conntrack zones\" support for defrag user check in ip_expire\n\nDefrag user check in ip_expire was not updated after adding support for\n\"conntrack zones\".\n\nThis bug manifests as a RFC violation, since the router will send\nthe icmp time exceeeded message when using conntrack zones.\n\nSigned-off-by: Vasily Averin <vvs@openvz.org>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","Vasily Averin",true],["aff09ce303f83bd370772349238482ae422a2341","92a5505f10e70d6be04c6ea75cda66fdd7decf37@parallels.com","bridge: superfluous skb->nfct check in br_nf_dev_queue_xmit\n\nCurrently bridge can silently drop ipv4 fragments.\nIf node have loaded nf_defrag_ipv4 module but have no nf_conntrack_ipv4,\nbr_nf_pre_routing defragments incoming ipv4 fragments\nbut nfct check in br_nf_dev_queue_xmit does not allow re-fragment combined\npacket back, and therefore it is dropped in br_dev_queue_push_xmit without\nincrementing of any failcounters\n\nIt seems the only way to hit the ip_fragment code in the bridge xmit\npath is to have a fragment list whose reassembled fragments go over\nthe mtu. This only happens if nf_defrag is enabled. Thanks to\nFlorian Westphal for providing feedback to clarify this.\n\nDefragmentation ipv4 is required not only in conntracks but at least in\nTPROXY target and socket match, therefore #ifdef is changed from\nNF_CONNTRACK_IPV4 to NF_DEFRAG_IPV4\n\nSigned-off-by: Vasily Averin <vvs@openvz.org>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","Vasily Averin",true],["edb666f07e539d92f63284213d72083ed8ac05ea","66deb1d63f85161cc287ce2bac0c65cb5ae958a7@secunet.com","xfrm6: Properly handle unsupported protocols\n\nWe don't catch the case if an unsupported protocol is submitted\nto the xfrm6 protocol handlers, this can lead to NULL pointer\ndereferences. Fix this by adding the appropriate checks.\n\nFixes: 7e14ea15 (\"xfrm6: Add IPsec protocol multiplexer\")\nSigned-off-by: Steffen Klassert <steffen.klassert@secunet.com>","Steffen Klassert",true],["0fed2bcf17d2a049c079ffd2b7bc4caca4b7f906","643a80aaf16a8332d6a70921c14d4bb265446494@intel.com","iwlwifi: mvm: BT Coex - fix validity flags during init\n\nThe commit below introduced a bug in the validity bits in\ninit. Due to that, all the Coex mechanism stopped sending\nkills to the BT side. Fix that.\n\nFixes: b9fae2d54c9f (\"iwlwifi: mvm: BT Coex add support for Co-running block\")\nSigned-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>","Emmanuel Grumbach",true],["8e96440e8d42da0dab02cae125ea59e2b64c77fe","643a80aaf16a8332d6a70921c14d4bb265446494@intel.com","iwlwifi: mvm: rs - s/CPTCFG/CONFIG\n\nMy bad - I forgot to update this when sending the patch\nupstream.\n\nFixes: 87d5e4155c00 (\"iwlwifi: mvm: rs: reinit rs if no tx for a long time\")\nSigned-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>","Emmanuel Grumbach",true],["cabae81103584a8265114a543555781b7b0c88bd","2a53bac7a5d324865ef46ec4c38b2c0fba1456b4@tuxdriver.com","Merge git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211","John W. Linville",true],["bd5e4744a6ca64299b57a2682c720d00a475a734","fd1202a3583a2c18280b3ee0868e57d89bacc3b6@intel.com","iwlwifi: mvm: do no sched scan while associated\n\nCurrently the FW doesn't support sched scan while associated,\nPrevent it.\n\nSigned-off-by: David Spinadel <david.spinadel@intel.com>\nReviewed-by: Johannes Berg <johannes.berg@intel.com>\nReviewed-by: Luciano Coelho <luciano.coelho@intel.com>\nSigned-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>","David Spinadel",true]],"size":145,"ref":"refs/heads/master","head":"1ee1ceafb572f1a925809168267a7962a4289de8"}