leandrof/linux
1
0
Fork 0
forked from Minki/linux
Code Issues Pull Requests Packages Projects Releases Wiki Activity
e2fe35c17f
linux/net/ipv6/netfilter
History
Jan Engelhardt e2fe35c17f netfilter: xtables: check for standard verdicts in policies 
This adds the second check that Rusty wanted to have a long time ago. :-)

Base chain policies must have absolute verdicts that cease processing
in the table, otherwise rule execution may continue in an unexpected
spurious fashion (e.g. next chain that follows in memory).

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
2009-08-10 13:35:31 +02:00
..
ip6_queue.c netfilter: queue: use NFPROTO_ for queue callsites 2009-05-08 10:30:46 +02:00
ip6_tables.c netfilter: xtables: check for standard verdicts in policies 2009-08-10 13:35:31 +02:00
ip6t_ah.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_eui64.c netfilter: xtables: move extension arguments into compound structure (1/6) 2008-10-08 11:35:18 +02:00
ip6t_frag.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_hbh.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_ipv6header.c netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE 2009-05-05 15:32:16 +02:00
ip6t_LOG.c netfilter: use a linked list of loggers 2009-03-16 14:54:21 +01:00
ip6t_mh.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6t_REJECT.c net: skb->dst accessors 2009-06-03 02:51:04 -07:00
ip6t_rt.c netfilter: xtables: move extension arguments into compound structure (2/6) 2008-10-08 11:35:18 +02:00
ip6table_filter.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
ip6table_mangle.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
ip6table_raw.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
ip6table_security.c netfilter: xtables: switch table AFs to nfproto 2009-08-10 13:35:23 +02:00
Kconfig netfilter: trivial Kconfig spelling fixes 2009-03-24 13:35:27 -07:00
Makefile netfilter: Combine ipt_ttl and ip6t_hl source 2009-02-18 18:39:31 +01:00
nf_conntrack_l3proto_ipv6.c netfilter: conntrack: switch hook PFs to nfproto 2009-08-10 13:35:20 +02:00
nf_conntrack_proto_icmpv6.c netfilter: nf_ct_icmp: keep the ICMP ct entries longer 2009-06-08 15:53:43 +02:00
nf_conntrack_reasm.c netfilter: Use frag list abstraction interfaces. 2009-06-09 00:23:58 -07:00