AndreDVJ
f8463dc1e8
dropbear: Updated to 2018.76
...
Tomato-specific patch was also updated
8 years ago
kille72
57de2f1266
tor: updated to 0.3.2.10
8 years ago
pedro
fb421ca0b9
kernel: update drivers/net/ modules (no subdirs)
...
Commit needs further tests on: pppoe, ppptp, etc.
* drivers/net/
- ppp_async.c (last one)
- ppp_deflate.c (last one)
- ppp_mppe.c (last one)
- ppp_synctty.c (last one)
- pppoe.c (last one)
- slhc.c (last one)
- loopback.c
+ [2010.09.27] - net: loopback driver cleanup
+ [2011.04.18] - ip6_pol_route panic: Do not allow VLAN on loopback
+ [2012.07.22] - net: fix race condition in several drivers when reading stats
+ [2012.09.24] - net: loopback: set default mtu to 64K
+ [2013.01.27] - net: loopback: fix a dst refcounting issue
+ [2013.09.18] - net loopback: Set loopback_dev to NULL when freed
(more doesn't make sense)
- pptp.c
+ [2010.09.22] - net: constify some ppp/pptp structs
+ [2010.11.28] - drivers/net: use vzalloc()
+ [2010.12.13] - net: Abstract RTAX_HOPLIMIT metric accesses behind helper.
+ [2010.12.13] - ipv4: Don't pre-seed hoplimit metric.
(more doesn't make sense)
- ppp_generic.c
+ [2010.10.05] - ppp: Use a real SKB control block in fragmentation engine.
+ [2010.10.15] - llseek: automatically add .llseek fop
+ [2010.10.19] - filter: optimize sk_run_filter
+ [2010.11.28] - net, ppp: Report correct error code if unit allocation failed
+ [2010.12.28] - ppp: allow disabling multilink protocol ID compression
+ [2011.01.11] - net: ppp: use {get,put}_unaligned_be{16,32}
+ [2011.01.21] - ppp: Clean up kernel log messages.
+ [2011.01.21] - ppp: Reconstruct fragmented packets using frag lists instead of copying.
+ [2011.01.21] - ppp: Use SKB queue abstraction interfaces in fragment processing.
+ [2011.03.31] - Fix common misspellings
(last one)
- ifb.c
+ [2010.12.10] - ifb: remove the useless debug stats
+ [2010.12.10] - ifb: remove unused macro TX_TIMEOUT
+ [2010.12.10] - ifb: use the lockless variants of skb_queue
+ [2010.12.16] - ifb: fix a lockdep splat
+ [2010.12.20] - ifb: use netif_receive_skb() instead of netif_rx()
+ [2011.01.03] - ifb: add performance flags
+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
+ [2011.06.22] - ifb: convert to 64 bit stats
+ [2013.07.11] - ifb: fix rcu_sched self-detected stalls
+ [2013.07.11] - ifb: fix oops when loading the ifb failed
+ [2015.04.17] - act_mirred: Fix bogus header when redirecting from VLAN
(more doesn't make sense)
- mii.c
+ [2015.01.19] - mii: Handle link state changes for forced modes in mii_check_media()
(more is impossible [mii_ethtool_{get|set}_link_ksettings])
- tun.c
+ [2010.11.01] - tree-wide: fix comment/printk typos
+ [2010.12.16] - net: Use skb_checksum_start_offset()
+ [2011.01.25] - net: change netdev->features to u32
(without changing the order in struct net_device)
+ [2011.03.03] - tun: Convert logging messages to pr_<level> and tun_debug
+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
(already done)
+ [2011.06.09] - tun: reserves space for network in skb
+ [2011.06.09] - tun: dont force inline of functions
+ [2011.06.09] - tun: do not put self in waitq if doing a nonblock read
+ [2011.06.12] - virtio_net: introduce VIRTIO_NET_HDR_F_DATA_VALID
+ [2011.06.17] - tun: teach the tun/tap driver to support netpoll
(also: ---> netpoll: disable netpoll when enslave a device)
+ [2011.06.28] - net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared
+ [2011.11.16] - net: sweep-up some straglers in strlcpy conversion of .get_drvinfo routines
+ [2011.11.22] - Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine of a number of drivers
+ [2012.02.15] - net: replace random_ether_addr() with eth_hw_addr_random()
+ [2012.03.13] - tun: don't hold network namespace by tun sockets
+ [2012.05.11] - drivers/net: Convert compare_ether_addr to ether_addr_equal
+ [2012.07.17] - drivers/net: Use eth_random_addr
+ [2012.07.20] - tun: fix a crash bug and a memory leak
+ [2012.07.30] - net/tun: fix ioctl() based info leaks
+ [2012.08.10] - tun: don't zeroize sock->file on detach
+ [2012.09.14] - cgroup: net_cls: Move sock_update_classid() declaration to cls_cgroup.h
+ [2012.10.26] - cgroup: net_cls: Pass in task to sock_update_classid()
+ [2012.11.01] - tuntap: log the unsigned informaiton with %u
* include/linux/
- netdevice.h
+ [2010.08.16] - cfg80211: support sysfs namespaces
(doesn't matter, because modules do not build)
+ [2010.08.23] - net: Rename skb_has_frags to skb_has_frag_list
+ [2010.08.31] - net: add a comment on netdev->last_rx
+ [2010.09.16] - ipv4: ip_ptr cleanups
+ [2010.09.19] - net: reorder struct netdev_hw_addr * net/core - filter.c
+ [2011.03.31] - Fix common misspellings
+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
+ [2014.01.16] - bpf: do not use reciprocal divide
* net/core
- filter.c
+ [2011.03.31] - Fix common misspellings
+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
+ [2014.01.16] - bpf: do not use reciprocal divide
8 years ago
pedro
72befb92d9
kernel: update drivers/net/ modules (no subdirs)
...
Commit needs further tests on: pppoe, ppptp, etc.
* drivers/net/
- ppp_async.c (last one)
- ppp_deflate.c (last one)
- ppp_mppe.c (last one)
- ppp_synctty.c (last one)
- pppoe.c (last one)
- slhc.c (last one)
- loopback.c
+ [2010.09.27] - net: loopback driver cleanup
+ [2011.04.18] - ip6_pol_route panic: Do not allow VLAN on loopback
+ [2012.07.22] - net: fix race condition in several drivers when reading stats
+ [2012.09.24] - net: loopback: set default mtu to 64K
+ [2013.01.27] - net: loopback: fix a dst refcounting issue
+ [2013.09.18] - net loopback: Set loopback_dev to NULL when freed
(more doesn't make sense)
- pptp.c
+ [2010.09.22] - net: constify some ppp/pptp structs
+ [2010.11.28] - drivers/net: use vzalloc()
+ [2010.12.13] - net: Abstract RTAX_HOPLIMIT metric accesses behind helper.
+ [2010.12.13] - ipv4: Don't pre-seed hoplimit metric.
(more doesn't make sense)
- ppp_generic.c
+ [2010.10.05] - ppp: Use a real SKB control block in fragmentation engine.
+ [2010.10.15] - llseek: automatically add .llseek fop
+ [2010.10.19] - filter: optimize sk_run_filter
+ [2010.11.28] - net, ppp: Report correct error code if unit allocation failed
+ [2010.12.28] - ppp: allow disabling multilink protocol ID compression
+ [2011.01.11] - net: ppp: use {get,put}_unaligned_be{16,32}
+ [2011.01.21] - ppp: Clean up kernel log messages.
+ [2011.01.21] - ppp: Reconstruct fragmented packets using frag lists instead of copying.
+ [2011.01.21] - ppp: Use SKB queue abstraction interfaces in fragment processing.
+ [2011.03.31] - Fix common misspellings
(last one)
- ifb.c
+ [2010.12.10] - ifb: remove the useless debug stats
+ [2010.12.10] - ifb: remove unused macro TX_TIMEOUT
+ [2010.12.10] - ifb: use the lockless variants of skb_queue
+ [2010.12.16] - ifb: fix a lockdep splat
+ [2010.12.20] - ifb: use netif_receive_skb() instead of netif_rx()
+ [2011.01.03] - ifb: add performance flags
+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
+ [2011.06.22] - ifb: convert to 64 bit stats
+ [2013.07.11] - ifb: fix rcu_sched self-detected stalls
+ [2013.07.11] - ifb: fix oops when loading the ifb failed
+ [2015.04.17] - act_mirred: Fix bogus header when redirecting from VLAN
(more doesn't make sense)
- mii.c
+ [2015.01.19] - mii: Handle link state changes for forced modes in mii_check_media()
(more is impossible [mii_ethtool_{get|set}_link_ksettings])
- tun.c
+ [2010.11.01] - tree-wide: fix comment/printk typos
+ [2010.12.16] - net: Use skb_checksum_start_offset()
+ [2011.01.25] - net: change netdev->features to u32
(without changing the order in struct net_device)
+ [2011.03.03] - tun: Convert logging messages to pr_<level> and tun_debug
+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
(already done)
+ [2011.06.09] - tun: reserves space for network in skb
+ [2011.06.09] - tun: dont force inline of functions
+ [2011.06.09] - tun: do not put self in waitq if doing a nonblock read
+ [2011.06.12] - virtio_net: introduce VIRTIO_NET_HDR_F_DATA_VALID
+ [2011.06.17] - tun: teach the tun/tap driver to support netpoll
(also: ---> netpoll: disable netpoll when enslave a device)
+ [2011.06.28] - net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared
+ [2011.11.16] - net: sweep-up some straglers in strlcpy conversion of .get_drvinfo routines
+ [2011.11.22] - Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine of a number of drivers
+ [2012.02.15] - net: replace random_ether_addr() with eth_hw_addr_random()
+ [2012.03.13] - tun: don't hold network namespace by tun sockets
+ [2012.05.11] - drivers/net: Convert compare_ether_addr to ether_addr_equal
+ [2012.07.17] - drivers/net: Use eth_random_addr
+ [2012.07.20] - tun: fix a crash bug and a memory leak
+ [2012.07.30] - net/tun: fix ioctl() based info leaks
+ [2012.08.10] - tun: don't zeroize sock->file on detach
+ [2012.09.14] - cgroup: net_cls: Move sock_update_classid() declaration to cls_cgroup.h
+ [2012.10.26] - cgroup: net_cls: Pass in task to sock_update_classid()
+ [2012.11.01] - tuntap: log the unsigned informaiton with %u
* include/linux/
- netdevice.h
+ [2010.08.16] - cfg80211: support sysfs namespaces
(doesn't matter, because modules do not build)
+ [2010.08.23] - net: Rename skb_has_frags to skb_has_frag_list
+ [2010.08.31] - net: add a comment on netdev->last_rx
+ [2010.09.16] - ipv4: ip_ptr cleanups
+ [2010.09.19] - net: reorder struct netdev_hw_addr * net/core - filter.c
+ [2011.03.31] - Fix common misspellings
+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
+ [2014.01.16] - bpf: do not use reciprocal divide
* net/core
- filter.c
+ [2011.03.31] - Fix common misspellings
+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
+ [2014.01.16] - bpf: do not use reciprocal divide
8 years ago
pedro
113269f74d
kernel: update drivers/net/ modules (no subdirs)
...
Commit needs further tests on: pppoe, ppptp, etc.
* drivers/net/
- ppp_async.c (last one)
- ppp_deflate.c (last one)
- ppp_mppe.c (last one)
- ppp_synctty.c (last one)
- pppoe.c (last one)
- slhc.c (last one)
- loopback.c
+ [2010.09.27] - net: loopback driver cleanup
+ [2011.04.18] - ip6_pol_route panic: Do not allow VLAN on loopback
+ [2012.07.22] - net: fix race condition in several drivers when reading stats
+ [2012.09.24] - net: loopback: set default mtu to 64K
+ [2013.01.27] - net: loopback: fix a dst refcounting issue
+ [2013.09.18] - net loopback: Set loopback_dev to NULL when freed
(more doesn't make sense)
- pptp.c
+ [2010.09.22] - net: constify some ppp/pptp structs
+ [2010.11.28] - drivers/net: use vzalloc()
+ [2010.12.13] - net: Abstract RTAX_HOPLIMIT metric accesses behind helper.
+ [2010.12.13] - ipv4: Don't pre-seed hoplimit metric.
(more doesn't make sense)
- ppp_generic.c
+ [2010.10.05] - ppp: Use a real SKB control block in fragmentation engine.
+ [2010.10.15] - llseek: automatically add .llseek fop
+ [2010.10.19] - filter: optimize sk_run_filter
+ [2010.11.28] - net, ppp: Report correct error code if unit allocation failed
+ [2010.12.28] - ppp: allow disabling multilink protocol ID compression
+ [2011.01.11] - net: ppp: use {get,put}_unaligned_be{16,32}
+ [2011.01.21] - ppp: Clean up kernel log messages.
+ [2011.01.21] - ppp: Reconstruct fragmented packets using frag lists instead of copying.
+ [2011.01.21] - ppp: Use SKB queue abstraction interfaces in fragment processing.
+ [2011.03.31] - Fix common misspellings
(last one)
- ifb.c
+ [2010.12.10] - ifb: remove the useless debug stats
+ [2010.12.10] - ifb: remove unused macro TX_TIMEOUT
+ [2010.12.10] - ifb: use the lockless variants of skb_queue
+ [2010.12.16] - ifb: fix a lockdep splat
+ [2010.12.20] - ifb: use netif_receive_skb() instead of netif_rx()
+ [2011.01.03] - ifb: add performance flags
+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
+ [2011.06.22] - ifb: convert to 64 bit stats
+ [2013.07.11] - ifb: fix rcu_sched self-detected stalls
+ [2013.07.11] - ifb: fix oops when loading the ifb failed
+ [2015.04.17] - act_mirred: Fix bogus header when redirecting from VLAN
(more doesn't make sense)
- mii.c
+ [2015.01.19] - mii: Handle link state changes for forced modes in mii_check_media()
(more is impossible [mii_ethtool_{get|set}_link_ksettings])
- tun.c
+ [2010.11.01] - tree-wide: fix comment/printk typos
+ [2010.12.16] - net: Use skb_checksum_start_offset()
+ [2011.01.25] - net: change netdev->features to u32
(without changing the order in struct net_device)
+ [2011.03.03] - tun: Convert logging messages to pr_<level> and tun_debug
+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
(already done)
+ [2011.06.09] - tun: reserves space for network in skb
+ [2011.06.09] - tun: dont force inline of functions
+ [2011.06.09] - tun: do not put self in waitq if doing a nonblock read
+ [2011.06.12] - virtio_net: introduce VIRTIO_NET_HDR_F_DATA_VALID
+ [2011.06.17] - tun: teach the tun/tap driver to support netpoll
(also: ---> netpoll: disable netpoll when enslave a device)
+ [2011.06.28] - net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared
+ [2011.11.16] - net: sweep-up some straglers in strlcpy conversion of .get_drvinfo routines
+ [2011.11.22] - Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine of a number of drivers
+ [2012.02.15] - net: replace random_ether_addr() with eth_hw_addr_random()
+ [2012.03.13] - tun: don't hold network namespace by tun sockets
+ [2012.05.11] - drivers/net: Convert compare_ether_addr to ether_addr_equal
+ [2012.07.17] - drivers/net: Use eth_random_addr
+ [2012.07.20] - tun: fix a crash bug and a memory leak
+ [2012.07.30] - net/tun: fix ioctl() based info leaks
+ [2012.08.10] - tun: don't zeroize sock->file on detach
+ [2012.09.14] - cgroup: net_cls: Move sock_update_classid() declaration to cls_cgroup.h
+ [2012.10.26] - cgroup: net_cls: Pass in task to sock_update_classid()
+ [2012.11.01] - tuntap: log the unsigned informaiton with %u
* include/linux/
- netdevice.h
+ [2010.08.16] - cfg80211: support sysfs namespaces
(doesn't matter, because modules do not build)
+ [2010.08.23] - net: Rename skb_has_frags to skb_has_frag_list
+ [2010.08.31] - net: add a comment on netdev->last_rx
+ [2010.09.16] - ipv4: ip_ptr cleanups
+ [2010.09.19] - net: reorder struct netdev_hw_addr * net/core - filter.c
+ [2011.03.31] - Fix common misspellings
+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
+ [2014.01.16] - bpf: do not use reciprocal divide
* net/core
- filter.c
+ [2011.03.31] - Fix common misspellings
+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
+ [2014.01.16] - bpf: do not use reciprocal divide
8 years ago
kille72
bb4d67ab6b
Merge branch 'shibby-arm' into shibby-arm7
8 years ago
edrikk
a846ea9135
ip6_tunnel: get the min mtu properly in ip6_tnl_xmit
...
Now it's using IPV6_MIN_MTU as the min mtu in ip6_tnl_xmit, but
IPV6_MIN_MTU actually only works when the inner packet is ipv6.
With IPV6_MIN_MTU for ipv4 packets, the new pmtu for inner dst
couldn't be set less than 1280. It would cause tx_err and the
packet to be dropped when the outer dst pmtu is close to 1280.
Jianlin found it by running ipv4 traffic with the topo:
(client) gre6 <---> eth1 (route) eth2 <---> gre6 (server)
After changing eth2 mtu to 1300, the performance became very
low, or the connection was even broken. The issue also affects
ip4ip6 and ip6ip6 tunnels.
So if the inner packet is ipv4, 576 should be considered as the
min mtu.
Note that for ip4ip6 and ip6ip6 tunnels, the inner packet can
only be ipv4 or ipv6, but for gre6 tunnel, it may also be ARP.
This patch using 576 as the min mtu for non-ipv6 packet works
for all those cases.
Reported-by: Jianlin Shi <jishi@redhat.com>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c9fefa08190fc879fb2e681035d7774e0a8c5170
8 years ago
edrikk
602999f219
Similar problem as IPv4 being resolved here in IPv6 where if the mode is unknown we will skip initialization while returning zero. However, this
...
is harmless as the mode has already been checked further up the
stack. This patch removes this anomaly by aligning the IPv6
behaviour with IPv4 and treating unknown modes (which cannot
actually happen) as transport mode.
Fixes: 38320c70d282 ("[IPSEC]: Use crypto_aead and authenc in ESP")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
edrikk
bc0ae703eb
xfrm: Return error on unknown encap_type in init_state
...
Currently esp will happily create an xfrm state with an unknown
encap type for IPv4, without setting the necessary state parameters.
This patch fixes it by returning -EINVAL.
Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
kille72
e6dbc55cb9
patches: cosmetics in php patch
8 years ago
kille72
57b0e95c39
php: updated to 7.2.3
8 years ago
kille72
e6c6aeb3a2
OpenVPN: updated to 2.4.5
8 years ago
kille72
8268208c7e
miniupnpd: updated to 2.0.20180222
8 years ago
kille72
7c08a8f1fe
patches: cosmetics in php patch
8 years ago
kille72
5d6de3f2b5
php: updated to 7.2.3
8 years ago
kille72
ea2fc23984
OpenVPN: updated to 2.4.5
8 years ago
kille72
bc76831f31
Merge branch 'shibby-arm' into shibby-arm7
8 years ago
kille72
72f41f3199
miniupnpd: updated to 2.0.20180222
8 years ago
pedro
e82657b4b0
kernel: EHCI: fix direction handling for interrupt data toggles
...
- Fixes from upstream for sdk7.
as per: 43daf3195f
kernel.org commit e04f5f7e423018bcec84c11af2058cdce87816f3
8 years ago
pedro
d7f0af9386
kernel: net: fixes from upstream for sdk7.
...
as per: fddcc1cfa6
Align with upstream following fixes. Beyond the fix noted in link, aligning strengthens code such that input is not clobbered in case of inability allocate memory.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c28294b941232931fbd714099798eb7aa7e865d7
8 years ago
pedro
aa0cf42150
kernel: igmp: acquire pmc lock for ip_mc_clear_src()
...
- Fixes from upstream for sdk7.
as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c38b7d327aafd1e3ad7ff53eefac990673b65667
8 years ago
pedro
674cc61d40
kernel: igmp: add a missing spin_lock_init()
...
- Fixes from upstream for sdk7.
as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b4846fc3c8559649277e3e4e6b5cec5348a8d208
8 years ago
pedro
811789055f
kernel: bridge: fix parsing of MLDv2 reports
...
- Fixes from upstream for sdk7.
as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/bridge/br_multicast.c?id=47cc84ce0c2fe75c99ea5963c4b5704dd78ead54
8 years ago
pedro
e3c12dfe04
kernel: ipv4: force_igmp_version ignored when a IGMPv3 query received
...
- Fixes from upstream for sdk7.
as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7998156344b0d93de61ff8e5d75e96500e43a571
8 years ago
pedro
8eecd67e4a
kernel: ip6_tunnel: get the min mtu properly in ip6_tnl_xmit
...
- Fixes from upstream for sdk7.
Now it's using IPV6_MIN_MTU as the min mtu in ip6_tnl_xmit, but
IPV6_MIN_MTU actually only works when the inner packet is ipv6.
With IPV6_MIN_MTU for ipv4 packets, the new pmtu for inner dst
couldn't be set less than 1280. It would cause tx_err and the
packet to be dropped when the outer dst pmtu is close to 1280.
Jianlin found it by running ipv4 traffic with the topo:
(client) gre6 <---> eth1 (route) eth2 <---> gre6 (server)
After changing eth2 mtu to 1300, the performance became very
low, or the connection was even broken. The issue also affects
ip4ip6 and ip6ip6 tunnels.
So if the inner packet is ipv4, 576 should be considered as the
min mtu.
Note that for ip4ip6 and ip6ip6 tunnels, the inner packet can
only be ipv4 or ipv6, but for gre6 tunnel, it may also be ARP.
This patch using 576 as the min mtu for non-ipv6 packet works
for all those cases.
as per: c9fefa0819 (diff-c23b021ee0efe6250f60230543981fa4)
8 years ago
pedro
756bcd4cf0
kernel: xfrm: Return error on unknown encap_type in init_state
...
- Fixes from upstream for sdk7.
Currently esp will happily create an xfrm state with an unknown
encap type for IPv4, without setting the necessary state parameters.
This patch fixes it by returning -EINVAL.
There is a similar problem in IPv6 where if the mode is unknown
we will skip initialisation while returning zero. However, this
is harmless as the mode has already been checked further up the
stack. This patch removes this anomaly by aligning the IPv6
behaviour with IPv4 and treating unknown modes (which cannot
actually happen) as transport mode.
as per: bcfd09f783 (diff-2ee011da7be9b1f7932e0520874c09a4)
8 years ago
kille72
070bf67c20
nginx: updated to 1.13.9 (2018-02-20)
8 years ago
kille72
2ceda97200
Updated adminer from 4.6.1 to 4.6.2 2018-02-20
...
(only English)
8 years ago
kille72
75773591b2
Merge branch 'shibby-arm' into shibby-arm7
8 years ago
kille72
f31c33888e
nginx: updated to 1.13.9 (2018-02-20)
8 years ago
kille72
7b498e0f56
Updated adminer from 4.6.1 to 4.6.2 2018-02-20
...
(only English)
8 years ago
edrikk
047efcf56a
ip6_tunnel: get the min mtu properly in ip6_tnl_xmit
...
Now it's using IPV6_MIN_MTU as the min mtu in ip6_tnl_xmit, but
IPV6_MIN_MTU actually only works when the inner packet is ipv6.
With IPV6_MIN_MTU for ipv4 packets, the new pmtu for inner dst
couldn't be set less than 1280. It would cause tx_err and the
packet to be dropped when the outer dst pmtu is close to 1280.
Jianlin found it by running ipv4 traffic with the topo:
(client) gre6 <---> eth1 (route) eth2 <---> gre6 (server)
After changing eth2 mtu to 1300, the performance became very
low, or the connection was even broken. The issue also affects
ip4ip6 and ip6ip6 tunnels.
So if the inner packet is ipv4, 576 should be considered as the
min mtu.
Note that for ip4ip6 and ip6ip6 tunnels, the inner packet can
only be ipv4 or ipv6, but for gre6 tunnel, it may also be ARP.
This patch using 576 as the min mtu for non-ipv6 packet works
for all those cases.
Reported-by: Jianlin Shi <jishi@redhat.com>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c9fefa08190fc879fb2e681035d7774e0a8c5170
8 years ago
edrikk
a86f6593f8
Similar problem as IPv4 being resolved here in IPv6 where if the mode is unknown we will skip initialization while returning zero. However, this
...
is harmless as the mode has already been checked further up the
stack. This patch removes this anomaly by aligning the IPv6
behaviour with IPv4 and treating unknown modes (which cannot
actually happen) as transport mode.
Fixes: 38320c70d282 ("[IPSEC]: Use crypto_aead and authenc in ESP")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
edrikk
885e1c6273
xfrm: Return error on unknown encap_type in init_state
...
Currently esp will happily create an xfrm state with an unknown
encap type for IPv4, without setting the necessary state parameters.
This patch fixes it by returning -EINVAL.
Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
pedro
1006d4f83d
dnsmasq: update to v2.79rc1-2018.02.16
8 years ago
pedro
6670a371f0
dropbear: move patch to separate directory
...
- based on AndreDVJ commit: f9434c77ce
with small fix
8 years ago
AndreDVJ
2633f67553
~/router/Makefile: updated to support ncurses 6.1
8 years ago
AndreDVJ
a382e8450f
libncurses: Updated to 6.1
8 years ago
AndreDVJ
2b3ad79f3a
nettle: Updated to 3.4
8 years ago
pedro
9808417646
dnsmasq: update to v2.79rc1-2018.02.16
8 years ago
pedro
0e04e34355
dropbear: move patch to separate directory
...
- based on AndreDVJ commit: f9434c77ce
with small fix
8 years ago
AndreDVJ
a767196006
~/router/Makefile: updated to support ncurses 6.1
8 years ago
AndreDVJ
d2bb9d39f0
libncurses: Updated to 6.1
8 years ago
AndreDVJ
59bd6190da
nettle: Updated to 3.4
8 years ago
kille72
2b8a028ddb
/router/rc/services.c: miniupnpd - changed the coding to use an interface name for the listening_ip= value instead of an IP/netmask to prevent log flood
...
https://github.com/miniupnp/miniupnp/issues/272
Thanks @Sean B.
8 years ago
kille72
4073b30e33
miniupnpd: updated to 2.0.20180203
8 years ago
kille72
bfb985beaf
/router/rc/services.c: miniupnpd - changed the coding to use an interface name for the listening_ip= value instead of an IP/netmask to prevent log flood
...
https://github.com/miniupnp/miniupnp/issues/272
Thanks @Sean B.
8 years ago
kille72
c4ae03b988
miniupnpd: updated to 2.0.20180203
8 years ago
kille72
9793d401c8
Merge branch 'shibby-arm' into shibby-arm7
8 years ago
AndreDVJ
c4b3841d3b
Patch for xl2tpd in a separate file
8 years ago