Georg Kohmann 68f9f9c2c3 netfilter: Drop fragmented ndisc packets assembled in netfilter ... Fragmented ndisc packets assembled in netfilter not dropped as specified in RFC 6980, section 5. This behaviour breaks TAHI IPv6 Core Conformance Tests v6LC.2.1.22/23, V6LC.2.2.26/27 and V6LC.2.3.18. Setting IP6SKB_FRAGMENTED flag during reassembly. References: commit b800c3b966 ("ipv6: drop fragmented ndisc packets by default (RFC 6980)") Signed-off-by: Georg Kohmann <geokohma@cisco.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2020-10-20 13:54:53 +02:00
..
ip6_tables.c	net: remove sockptr_advance	2020-07-28 13:43:40 -07:00
ip6t_ah.c	netfilter: ip6tables: Remove redundant null checks	2020-07-29 20:39:43 +02:00
ip6t_eui64.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
ip6t_frag.c	netfilter: ip6tables: Remove redundant null checks	2020-07-29 20:39:43 +02:00
ip6t_hbh.c	netfilter: ip6tables: Remove redundant null checks	2020-07-29 20:39:43 +02:00
ip6t_ipv6header.c	netfilter: move inline nf_ip6_ext_hdr() function to a more appropriate header.	2019-09-13 12:34:09 +02:00
ip6t_mh.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
ip6t_NPT.c	netfilter: ip6t_NPT: rewrite addresses in ICMPv6 original packet	2020-08-28 19:18:48 +02:00
ip6t_REJECT.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
ip6t_rpfilter.c	netfilter: Fix rpfilter dropping vrf packets by mistake	2019-07-16 13:16:47 +02:00
ip6t_rt.c	netfilter: ip6tables: Remove redundant null checks	2020-07-29 20:39:43 +02:00
ip6t_srh.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
ip6t_SYNPROXY.c	netfilter: Add MODULE_DESCRIPTION entries to kernel modules	2020-06-25 00:50:31 +02:00
ip6table_filter.c	netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.	2020-06-25 00:50:31 +02:00
ip6table_mangle.c	netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.	2020-06-25 00:50:31 +02:00
ip6table_nat.c	netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.	2020-06-25 00:50:31 +02:00
ip6table_raw.c	netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.	2020-06-25 00:50:31 +02:00
ip6table_security.c	netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.	2020-06-25 00:50:31 +02:00
Kconfig	treewide: replace '---help---' in Kconfig files with 'help'	2020-06-14 01:57:21 +09:00
Makefile	netfilter: x_tables: merge ip and ipv6 masquerade modules	2019-04-11 20:59:29 +02:00
nf_conntrack_reasm.c	netfilter: Drop fragmented ndisc packets assembled in netfilter	2020-10-20 13:54:53 +02:00
nf_defrag_ipv6_hooks.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
nf_dup_ipv6.c	netfilter: drop bridge nf reset from nf_reset	2019-10-01 18:42:15 +02:00
nf_flow_table_ipv6.c	netfilter: Add MODULE_DESCRIPTION entries to kernel modules	2020-06-25 00:50:31 +02:00
nf_log_ipv6.c	netfilter: nf_log: missing vlan offload tag and proto	2020-10-14 01:25:14 +02:00
nf_reject_ipv6.c	netfilter: introduce support for reject at prerouting stage	2020-06-30 18:21:02 +02:00
nf_socket_ipv6.c	treewide: Remove uninitialized_var() usage	2020-07-16 12:35:15 -07:00
nf_tproxy_ipv6.c	netfilter: nft_tproxy: Fix typo in IPv6 module description.	2019-10-17 12:21:11 +02:00
nft_dup_ipv6.c	netfilter: Add MODULE_DESCRIPTION entries to kernel modules	2020-06-25 00:50:31 +02:00
nft_fib_ipv6.c	netfilter: Add MODULE_DESCRIPTION entries to kernel modules	2020-06-25 00:50:31 +02:00
nft_reject_ipv6.c	netfilter: Add MODULE_DESCRIPTION entries to kernel modules	2020-06-25 00:50:31 +02:00