Pablo Neira Ayuso 70c261d500 netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation ... From netdev/egress, skb->len can include the ethernet header, therefore, subtract network offset from skb->len when validating IPv6 packet length. Fixes: 42df6e1d22 ("netfilter: Introduce egress hook") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2024-08-27 18:11:56 +02:00
..
ipv4	…
ipv6	…
br_netfilter.h	…
nf_bpf_link.h	…
nf_conntrack.h	netfilter: conntrack: simplify nf_conntrack_alter_reply	2023-10-10 16:34:28 +02:00
nf_conntrack_acct.h	netfilter: conntrack: Remove unused function declarations	2023-08-08 13:02:00 +02:00
nf_conntrack_act_ct.h	net/sched: act_ct: Always fill offloading tuple iifidx	2023-11-08 17:47:08 -08:00
nf_conntrack_bpf.h	…
nf_conntrack_bridge.h	…
nf_conntrack_core.h	…
nf_conntrack_count.h	…
nf_conntrack_ecache.h	…
nf_conntrack_expect.h	netfilter: allow exp not to be removed in nf_ct_find_expectation	2023-07-20 10:06:36 +02:00
nf_conntrack_extend.h	…
nf_conntrack_helper.h	netfilter: helper: Remove unused function declarations	2023-08-08 13:01:59 +02:00
nf_conntrack_l4proto.h	…
nf_conntrack_labels.h	netfilter: conntrack: switch connlabels to atomic_t	2023-10-24 13:16:30 +02:00
nf_conntrack_seqadj.h	…
nf_conntrack_synproxy.h	…
nf_conntrack_timeout.h	…
nf_conntrack_timestamp.h	…
nf_conntrack_tuple.h	netfilter: conntrack: don't fold port numbers into addresses before hashing	2023-07-05 14:42:16 +02:00
nf_conntrack_zones.h	…
nf_dup_netdev.h	…
nf_flow_table.h	netfilter: Add bpf_xdp_flow_lookup kfunc	2024-07-01 17:03:01 +02:00
nf_hooks_lwtunnel.h	sysctl: treewide: constify the ctl_table argument of proc_handlers	2024-07-24 20:59:29 +02:00
nf_log.h	…
nf_nat.h	…
nf_nat_helper.h	…
nf_nat_masquerade.h	…
nf_nat_redirect.h	…
nf_queue.h	netfilter: move nf_reinject into nfnetlink_queue modules	2024-02-21 12:03:22 +01:00
nf_reject.h	…
nf_socket.h	…
nf_synproxy.h	…
nf_tables.h	netfilter pull request 24-06-28	2024-07-01 09:52:35 +01:00
nf_tables_core.h	x86/bugs: Rename CONFIG_RETPOLINE => CONFIG_MITIGATION_RETPOLINE	2024-01-10 10:52:28 +01:00
nf_tables_ipv4.h	netfilter: nf_tables: restore IP sanity checks for netdev/egress	2024-08-26 13:05:28 +02:00
nf_tables_ipv6.h	netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation	2024-08-27 18:11:56 +02:00
nf_tables_offload.h	…
nf_tproxy.h	…
nft_fib.h	…
nft_meta.h	…
nft_reject.h	…
xt_rateest.h	…