Commit Graph

5495 Commits (2021.7)
 

Author SHA1 Message Date
AndreDVJ f8463dc1e8 dropbear: Updated to 2018.76
Tomato-specific patch was also updated
8 years ago
kille72 57de2f1266 tor: updated to 0.3.2.10 8 years ago
pedro fb421ca0b9 kernel: update drivers/net/ modules (no subdirs)
Commit needs further tests on: pppoe, ppptp, etc.

* drivers/net/

- ppp_async.c		(last one)
- ppp_deflate.c		(last one)
- ppp_mppe.c		(last one)
- ppp_synctty.c		(last one)
- pppoe.c		(last one)
- slhc.c		(last one)
- loopback.c
	+ [2010.09.27] - net: loopback driver cleanup
	+ [2011.04.18] - ip6_pol_route panic: Do not allow VLAN on loopback
	+ [2012.07.22] - net: fix race condition in several drivers when reading stats
	+ [2012.09.24] - net: loopback: set default mtu to 64K
	+ [2013.01.27] - net: loopback: fix a dst refcounting issue
	+ [2013.09.18] - net loopback: Set loopback_dev to NULL when freed
	(more doesn't make sense)
- pptp.c
	+ [2010.09.22] - net: constify some ppp/pptp structs
	+ [2010.11.28] - drivers/net: use vzalloc()
	+ [2010.12.13] - net: Abstract RTAX_HOPLIMIT metric accesses behind helper.
	+ [2010.12.13] - ipv4: Don't pre-seed hoplimit metric.
	(more doesn't make sense)
- ppp_generic.c
	+ [2010.10.05] - ppp: Use a real SKB control block in fragmentation engine.
	+ [2010.10.15] - llseek: automatically add .llseek fop
	+ [2010.10.19] - filter: optimize sk_run_filter
	+ [2010.11.28] - net, ppp: Report correct error code if unit allocation failed
	+ [2010.12.28] - ppp: allow disabling multilink protocol ID compression
	+ [2011.01.11] - net: ppp: use {get,put}_unaligned_be{16,32}
	+ [2011.01.21] - ppp: Clean up kernel log messages.
	+ [2011.01.21] - ppp: Reconstruct fragmented packets using frag lists instead of copying.
	+ [2011.01.21] - ppp: Use SKB queue abstraction interfaces in fragment processing.
	+ [2011.03.31] - Fix common misspellings
	(last one)
- ifb.c
	+ [2010.12.10] - ifb: remove the useless debug stats
	+ [2010.12.10] - ifb: remove unused macro TX_TIMEOUT
	+ [2010.12.10] - ifb: use the lockless variants of skb_queue
	+ [2010.12.16] - ifb: fix a lockdep splat
	+ [2010.12.20] - ifb: use netif_receive_skb() instead of netif_rx()
	+ [2011.01.03] - ifb: add performance flags
	+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
	+ [2011.06.22] - ifb: convert to 64 bit stats
	+ [2013.07.11] - ifb: fix rcu_sched self-detected stalls
	+ [2013.07.11] - ifb: fix oops when loading the ifb failed
	+ [2015.04.17] - act_mirred: Fix bogus header when redirecting from VLAN
	(more doesn't make sense)
- mii.c
	+ [2015.01.19] - mii: Handle link state changes for forced modes in mii_check_media()
	(more is impossible [mii_ethtool_{get|set}_link_ksettings])
- tun.c
	+ [2010.11.01] - tree-wide: fix comment/printk typos
	+ [2010.12.16] - net: Use skb_checksum_start_offset()
	+ [2011.01.25] - net: change netdev->features to u32
	(without changing the order in struct net_device)
	+ [2011.03.03] - tun: Convert logging messages to pr_<level> and tun_debug
	+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
	(already done)
	+ [2011.06.09] - tun: reserves space for network in skb
	+ [2011.06.09] - tun: dont force inline of functions
	+ [2011.06.09] - tun: do not put self in waitq if doing a nonblock read
	+ [2011.06.12] - virtio_net: introduce VIRTIO_NET_HDR_F_DATA_VALID
	+ [2011.06.17] - tun: teach the tun/tap driver to support netpoll
	(also: ---> netpoll: disable netpoll when enslave a device)
	+ [2011.06.28] - net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared
	+ [2011.11.16] - net: sweep-up some straglers in strlcpy conversion of .get_drvinfo routines
	+ [2011.11.22] - Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine of a number of drivers
	+ [2012.02.15] - net: replace random_ether_addr() with eth_hw_addr_random()
	+ [2012.03.13] - tun: don't hold network namespace by tun sockets
	+ [2012.05.11] - drivers/net: Convert compare_ether_addr to ether_addr_equal
	+ [2012.07.17] - drivers/net: Use eth_random_addr
	+ [2012.07.20] - tun: fix a crash bug and a memory leak
	+ [2012.07.30] - net/tun: fix ioctl() based info leaks
	+ [2012.08.10] - tun: don't zeroize sock->file on detach
	+ [2012.09.14] - cgroup: net_cls: Move sock_update_classid() declaration to cls_cgroup.h
	+ [2012.10.26] - cgroup: net_cls: Pass in task to sock_update_classid()
	+ [2012.11.01] - tuntap: log the unsigned informaiton with %u

* include/linux/

- netdevice.h
	+ [2010.08.16] - cfg80211: support sysfs namespaces
	(doesn't matter, because modules do not build)
	+ [2010.08.23] - net: Rename skb_has_frags to skb_has_frag_list
	+ [2010.08.31] - net: add a comment on netdev->last_rx
	+ [2010.09.16] - ipv4: ip_ptr cleanups
	+ [2010.09.19] - net: reorder struct netdev_hw_addr * net/core - filter.c
	+ [2011.03.31] - Fix common misspellings
	+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
	+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
	+ [2014.01.16] - bpf: do not use reciprocal divide

* net/core

- filter.c
	+ [2011.03.31] - Fix common misspellings
	+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
	+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
	+ [2014.01.16] - bpf: do not use reciprocal divide
8 years ago
pedro 72befb92d9 kernel: update drivers/net/ modules (no subdirs)
Commit needs further tests on: pppoe, ppptp, etc.

* drivers/net/

- ppp_async.c		(last one)
- ppp_deflate.c		(last one)
- ppp_mppe.c		(last one)
- ppp_synctty.c		(last one)
- pppoe.c		(last one)
- slhc.c		(last one)
- loopback.c
	+ [2010.09.27] - net: loopback driver cleanup
	+ [2011.04.18] - ip6_pol_route panic: Do not allow VLAN on loopback
	+ [2012.07.22] - net: fix race condition in several drivers when reading stats
	+ [2012.09.24] - net: loopback: set default mtu to 64K
	+ [2013.01.27] - net: loopback: fix a dst refcounting issue
	+ [2013.09.18] - net loopback: Set loopback_dev to NULL when freed
	(more doesn't make sense)
- pptp.c
	+ [2010.09.22] - net: constify some ppp/pptp structs
	+ [2010.11.28] - drivers/net: use vzalloc()
	+ [2010.12.13] - net: Abstract RTAX_HOPLIMIT metric accesses behind helper.
	+ [2010.12.13] - ipv4: Don't pre-seed hoplimit metric.
	(more doesn't make sense)
- ppp_generic.c
	+ [2010.10.05] - ppp: Use a real SKB control block in fragmentation engine.
	+ [2010.10.15] - llseek: automatically add .llseek fop
	+ [2010.10.19] - filter: optimize sk_run_filter
	+ [2010.11.28] - net, ppp: Report correct error code if unit allocation failed
	+ [2010.12.28] - ppp: allow disabling multilink protocol ID compression
	+ [2011.01.11] - net: ppp: use {get,put}_unaligned_be{16,32}
	+ [2011.01.21] - ppp: Clean up kernel log messages.
	+ [2011.01.21] - ppp: Reconstruct fragmented packets using frag lists instead of copying.
	+ [2011.01.21] - ppp: Use SKB queue abstraction interfaces in fragment processing.
	+ [2011.03.31] - Fix common misspellings
	(last one)
- ifb.c
	+ [2010.12.10] - ifb: remove the useless debug stats
	+ [2010.12.10] - ifb: remove unused macro TX_TIMEOUT
	+ [2010.12.10] - ifb: use the lockless variants of skb_queue
	+ [2010.12.16] - ifb: fix a lockdep splat
	+ [2010.12.20] - ifb: use netif_receive_skb() instead of netif_rx()
	+ [2011.01.03] - ifb: add performance flags
	+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
	+ [2011.06.22] - ifb: convert to 64 bit stats
	+ [2013.07.11] - ifb: fix rcu_sched self-detected stalls
	+ [2013.07.11] - ifb: fix oops when loading the ifb failed
	+ [2015.04.17] - act_mirred: Fix bogus header when redirecting from VLAN
	(more doesn't make sense)
- mii.c
	+ [2015.01.19] - mii: Handle link state changes for forced modes in mii_check_media()
	(more is impossible [mii_ethtool_{get|set}_link_ksettings])
- tun.c
	+ [2010.11.01] - tree-wide: fix comment/printk typos
	+ [2010.12.16] - net: Use skb_checksum_start_offset()
	+ [2011.01.25] - net: change netdev->features to u32
	(without changing the order in struct net_device)
	+ [2011.03.03] - tun: Convert logging messages to pr_<level> and tun_debug
	+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
	(already done)
	+ [2011.06.09] - tun: reserves space for network in skb
	+ [2011.06.09] - tun: dont force inline of functions
	+ [2011.06.09] - tun: do not put self in waitq if doing a nonblock read
	+ [2011.06.12] - virtio_net: introduce VIRTIO_NET_HDR_F_DATA_VALID
	+ [2011.06.17] - tun: teach the tun/tap driver to support netpoll
	(also: ---> netpoll: disable netpoll when enslave a device)
	+ [2011.06.28] - net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared
	+ [2011.11.16] - net: sweep-up some straglers in strlcpy conversion of .get_drvinfo routines
	+ [2011.11.22] - Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine of a number of drivers
	+ [2012.02.15] - net: replace random_ether_addr() with eth_hw_addr_random()
	+ [2012.03.13] - tun: don't hold network namespace by tun sockets
	+ [2012.05.11] - drivers/net: Convert compare_ether_addr to ether_addr_equal
	+ [2012.07.17] - drivers/net: Use eth_random_addr
	+ [2012.07.20] - tun: fix a crash bug and a memory leak
	+ [2012.07.30] - net/tun: fix ioctl() based info leaks
	+ [2012.08.10] - tun: don't zeroize sock->file on detach
	+ [2012.09.14] - cgroup: net_cls: Move sock_update_classid() declaration to cls_cgroup.h
	+ [2012.10.26] - cgroup: net_cls: Pass in task to sock_update_classid()
	+ [2012.11.01] - tuntap: log the unsigned informaiton with %u

* include/linux/

- netdevice.h
	+ [2010.08.16] - cfg80211: support sysfs namespaces
	(doesn't matter, because modules do not build)
	+ [2010.08.23] - net: Rename skb_has_frags to skb_has_frag_list
	+ [2010.08.31] - net: add a comment on netdev->last_rx
	+ [2010.09.16] - ipv4: ip_ptr cleanups
	+ [2010.09.19] - net: reorder struct netdev_hw_addr * net/core - filter.c
	+ [2011.03.31] - Fix common misspellings
	+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
	+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
	+ [2014.01.16] - bpf: do not use reciprocal divide

* net/core

- filter.c
	+ [2011.03.31] - Fix common misspellings
	+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
	+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
	+ [2014.01.16] - bpf: do not use reciprocal divide
8 years ago
pedro 113269f74d kernel: update drivers/net/ modules (no subdirs)
Commit needs further tests on: pppoe, ppptp, etc.

* drivers/net/

- ppp_async.c		(last one)
- ppp_deflate.c		(last one)
- ppp_mppe.c		(last one)
- ppp_synctty.c		(last one)
- pppoe.c		(last one)
- slhc.c		(last one)
- loopback.c
	+ [2010.09.27] - net: loopback driver cleanup
	+ [2011.04.18] - ip6_pol_route panic: Do not allow VLAN on loopback
	+ [2012.07.22] - net: fix race condition in several drivers when reading stats
	+ [2012.09.24] - net: loopback: set default mtu to 64K
	+ [2013.01.27] - net: loopback: fix a dst refcounting issue
	+ [2013.09.18] - net loopback: Set loopback_dev to NULL when freed
	(more doesn't make sense)
- pptp.c
	+ [2010.09.22] - net: constify some ppp/pptp structs
	+ [2010.11.28] - drivers/net: use vzalloc()
	+ [2010.12.13] - net: Abstract RTAX_HOPLIMIT metric accesses behind helper.
	+ [2010.12.13] - ipv4: Don't pre-seed hoplimit metric.
	(more doesn't make sense)
- ppp_generic.c
	+ [2010.10.05] - ppp: Use a real SKB control block in fragmentation engine.
	+ [2010.10.15] - llseek: automatically add .llseek fop
	+ [2010.10.19] - filter: optimize sk_run_filter
	+ [2010.11.28] - net, ppp: Report correct error code if unit allocation failed
	+ [2010.12.28] - ppp: allow disabling multilink protocol ID compression
	+ [2011.01.11] - net: ppp: use {get,put}_unaligned_be{16,32}
	+ [2011.01.21] - ppp: Clean up kernel log messages.
	+ [2011.01.21] - ppp: Reconstruct fragmented packets using frag lists instead of copying.
	+ [2011.01.21] - ppp: Use SKB queue abstraction interfaces in fragment processing.
	+ [2011.03.31] - Fix common misspellings
	(last one)
- ifb.c
	+ [2010.12.10] - ifb: remove the useless debug stats
	+ [2010.12.10] - ifb: remove unused macro TX_TIMEOUT
	+ [2010.12.10] - ifb: use the lockless variants of skb_queue
	+ [2010.12.16] - ifb: fix a lockdep splat
	+ [2010.12.20] - ifb: use netif_receive_skb() instead of netif_rx()
	+ [2011.01.03] - ifb: add performance flags
	+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
	+ [2011.06.22] - ifb: convert to 64 bit stats
	+ [2013.07.11] - ifb: fix rcu_sched self-detected stalls
	+ [2013.07.11] - ifb: fix oops when loading the ifb failed
	+ [2015.04.17] - act_mirred: Fix bogus header when redirecting from VLAN
	(more doesn't make sense)
- mii.c
	+ [2015.01.19] - mii: Handle link state changes for forced modes in mii_check_media()
	(more is impossible [mii_ethtool_{get|set}_link_ksettings])
- tun.c
	+ [2010.11.01] - tree-wide: fix comment/printk typos
	+ [2010.12.16] - net: Use skb_checksum_start_offset()
	+ [2011.01.25] - net: change netdev->features to u32
	(without changing the order in struct net_device)
	+ [2011.03.03] - tun: Convert logging messages to pr_<level> and tun_debug
	+ [2011.05.05] - net: call dev_alloc_name from register_netdevice
	(already done)
	+ [2011.06.09] - tun: reserves space for network in skb
	+ [2011.06.09] - tun: dont force inline of functions
	+ [2011.06.09] - tun: do not put self in waitq if doing a nonblock read
	+ [2011.06.12] - virtio_net: introduce VIRTIO_NET_HDR_F_DATA_VALID
	+ [2011.06.17] - tun: teach the tun/tap driver to support netpoll
	(also: ---> netpoll: disable netpoll when enslave a device)
	+ [2011.06.28] - net: Audit drivers to identify those needing IFF_TX_SKB_SHARING cleared
	+ [2011.11.16] - net: sweep-up some straglers in strlcpy conversion of .get_drvinfo routines
	+ [2011.11.22] - Sweep away N/A fw_version dustbunnies from the .get_drvinfo routine of a number of drivers
	+ [2012.02.15] - net: replace random_ether_addr() with eth_hw_addr_random()
	+ [2012.03.13] - tun: don't hold network namespace by tun sockets
	+ [2012.05.11] - drivers/net: Convert compare_ether_addr to ether_addr_equal
	+ [2012.07.17] - drivers/net: Use eth_random_addr
	+ [2012.07.20] - tun: fix a crash bug and a memory leak
	+ [2012.07.30] - net/tun: fix ioctl() based info leaks
	+ [2012.08.10] - tun: don't zeroize sock->file on detach
	+ [2012.09.14] - cgroup: net_cls: Move sock_update_classid() declaration to cls_cgroup.h
	+ [2012.10.26] - cgroup: net_cls: Pass in task to sock_update_classid()
	+ [2012.11.01] - tuntap: log the unsigned informaiton with %u

* include/linux/

- netdevice.h
	+ [2010.08.16] - cfg80211: support sysfs namespaces
	(doesn't matter, because modules do not build)
	+ [2010.08.23] - net: Rename skb_has_frags to skb_has_frag_list
	+ [2010.08.31] - net: add a comment on netdev->last_rx
	+ [2010.09.16] - ipv4: ip_ptr cleanups
	+ [2010.09.19] - net: reorder struct netdev_hw_addr * net/core - filter.c
	+ [2011.03.31] - Fix common misspellings
	+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
	+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
	+ [2014.01.16] - bpf: do not use reciprocal divide

* net/core

- filter.c
	+ [2011.03.31] - Fix common misspellings
	+ [2011.05.23] - net: filter: Use WARN_RATELIMIT
	+ [2011.05.26] - bug.h: Move ratelimit warn interfaces to ratelimit.h
	+ [2014.01.16] - bpf: do not use reciprocal divide
8 years ago
kille72 bb4d67ab6b Merge branch 'shibby-arm' into shibby-arm7 8 years ago
edrikk a846ea9135 ip6_tunnel: get the min mtu properly in ip6_tnl_xmit
Now it's using IPV6_MIN_MTU as the min mtu in ip6_tnl_xmit, but
IPV6_MIN_MTU actually only works when the inner packet is ipv6.

With IPV6_MIN_MTU for ipv4 packets, the new pmtu for inner dst
couldn't be set less than 1280. It would cause tx_err and the
packet to be dropped when the outer dst pmtu is close to 1280.

Jianlin found it by running ipv4 traffic with the topo:

  (client) gre6 <---> eth1 (route) eth2 <---> gre6 (server)

After changing eth2 mtu to 1300, the performance became very
low, or the connection was even broken. The issue also affects
ip4ip6 and ip6ip6 tunnels.

So if the inner packet is ipv4, 576 should be considered as the
min mtu.

Note that for ip4ip6 and ip6ip6 tunnels, the inner packet can
only be ipv4 or ipv6, but for gre6 tunnel, it may also be ARP.
This patch using 576 as the min mtu for non-ipv6 packet works
for all those cases.

Reported-by: Jianlin Shi <jishi@redhat.com>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>



Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c9fefa08190fc879fb2e681035d7774e0a8c5170
8 years ago
edrikk 602999f219 Similar problem as IPv4 being resolved here in IPv6 where if the mode is unknown we will skip initialization while returning zero. However, this
is harmless as the mode has already been checked further up the
stack.  This patch removes this anomaly by aligning the IPv6
behaviour with IPv4 and treating unknown modes (which cannot
actually happen) as transport mode.

Fixes: 38320c70d282 ("[IPSEC]: Use crypto_aead and authenc in ESP")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>


Per:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
edrikk bc0ae703eb xfrm: Return error on unknown encap_type in init_state
Currently esp will happily create an xfrm state with an unknown
encap type for IPv4, without setting the necessary state parameters.
This patch fixes it by returning -EINVAL.

Per:   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
kille72 e6dbc55cb9 patches: cosmetics in php patch 8 years ago
kille72 57b0e95c39 php: updated to 7.2.3 8 years ago
kille72 e6c6aeb3a2 OpenVPN: updated to 2.4.5 8 years ago
kille72 8268208c7e miniupnpd: updated to 2.0.20180222 8 years ago
kille72 7c08a8f1fe patches: cosmetics in php patch 8 years ago
kille72 5d6de3f2b5 php: updated to 7.2.3 8 years ago
kille72 ea2fc23984 OpenVPN: updated to 2.4.5 8 years ago
kille72 bc76831f31 Merge branch 'shibby-arm' into shibby-arm7 8 years ago
kille72 72f41f3199 miniupnpd: updated to 2.0.20180222 8 years ago
pedro e82657b4b0 kernel: EHCI: fix direction handling for interrupt data toggles
- Fixes from upstream for sdk7.

as per: 43daf3195f
kernel.org commit e04f5f7e423018bcec84c11af2058cdce87816f3
8 years ago
pedro d7f0af9386 kernel: net: fixes from upstream for sdk7.
as per: fddcc1cfa6

Align with upstream following fixes. Beyond the fix noted in link, aligning strengthens code such that input is not clobbered in case of inability allocate memory.

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c28294b941232931fbd714099798eb7aa7e865d7
8 years ago
pedro aa0cf42150 kernel: igmp: acquire pmc lock for ip_mc_clear_src()
- Fixes from upstream for sdk7.

as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c38b7d327aafd1e3ad7ff53eefac990673b65667
8 years ago
pedro 674cc61d40 kernel: igmp: add a missing spin_lock_init()
- Fixes from upstream for sdk7.

as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b4846fc3c8559649277e3e4e6b5cec5348a8d208
8 years ago
pedro 811789055f kernel: bridge: fix parsing of MLDv2 reports
- Fixes from upstream for sdk7.

as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/bridge/br_multicast.c?id=47cc84ce0c2fe75c99ea5963c4b5704dd78ead54
8 years ago
pedro e3c12dfe04 kernel: ipv4: force_igmp_version ignored when a IGMPv3 query received
- Fixes from upstream for sdk7.

as per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7998156344b0d93de61ff8e5d75e96500e43a571
8 years ago
pedro 8eecd67e4a kernel: ip6_tunnel: get the min mtu properly in ip6_tnl_xmit
- Fixes from upstream for sdk7.

Now it's using IPV6_MIN_MTU as the min mtu in ip6_tnl_xmit, but
IPV6_MIN_MTU actually only works when the inner packet is ipv6.

With IPV6_MIN_MTU for ipv4 packets, the new pmtu for inner dst
couldn't be set less than 1280. It would cause tx_err and the
packet to be dropped when the outer dst pmtu is close to 1280.

Jianlin found it by running ipv4 traffic with the topo:

  (client) gre6 <---> eth1 (route) eth2 <---> gre6 (server)

After changing eth2 mtu to 1300, the performance became very
low, or the connection was even broken. The issue also affects
ip4ip6 and ip6ip6 tunnels.

So if the inner packet is ipv4, 576 should be considered as the
min mtu.

Note that for ip4ip6 and ip6ip6 tunnels, the inner packet can
only be ipv4 or ipv6, but for gre6 tunnel, it may also be ARP.
This patch using 576 as the min mtu for non-ipv6 packet works
for all those cases.

as per: c9fefa0819 (diff-c23b021ee0efe6250f60230543981fa4)
8 years ago
pedro 756bcd4cf0 kernel: xfrm: Return error on unknown encap_type in init_state
- Fixes from upstream for sdk7.

Currently esp will happily create an xfrm state with an unknown
encap type for IPv4, without setting the necessary state parameters.
This patch fixes it by returning -EINVAL.

There is a similar problem in IPv6 where if the mode is unknown
we will skip initialisation while returning zero.  However, this
is harmless as the mode has already been checked further up the
stack.  This patch removes this anomaly by aligning the IPv6
behaviour with IPv4 and treating unknown modes (which cannot
actually happen) as transport mode.

as per: bcfd09f783 (diff-2ee011da7be9b1f7932e0520874c09a4)
8 years ago
kille72 070bf67c20 nginx: updated to 1.13.9 (2018-02-20) 8 years ago
kille72 2ceda97200 Updated adminer from 4.6.1 to 4.6.2 2018-02-20
(only English)
8 years ago
kille72 75773591b2 Merge branch 'shibby-arm' into shibby-arm7 8 years ago
kille72 f31c33888e nginx: updated to 1.13.9 (2018-02-20) 8 years ago
kille72 7b498e0f56 Updated adminer from 4.6.1 to 4.6.2 2018-02-20
(only English)
8 years ago
edrikk 047efcf56a ip6_tunnel: get the min mtu properly in ip6_tnl_xmit
Now it's using IPV6_MIN_MTU as the min mtu in ip6_tnl_xmit, but
IPV6_MIN_MTU actually only works when the inner packet is ipv6.

With IPV6_MIN_MTU for ipv4 packets, the new pmtu for inner dst
couldn't be set less than 1280. It would cause tx_err and the
packet to be dropped when the outer dst pmtu is close to 1280.

Jianlin found it by running ipv4 traffic with the topo:

  (client) gre6 <---> eth1 (route) eth2 <---> gre6 (server)

After changing eth2 mtu to 1300, the performance became very
low, or the connection was even broken. The issue also affects
ip4ip6 and ip6ip6 tunnels.

So if the inner packet is ipv4, 576 should be considered as the
min mtu.

Note that for ip4ip6 and ip6ip6 tunnels, the inner packet can
only be ipv4 or ipv6, but for gre6 tunnel, it may also be ARP.
This patch using 576 as the min mtu for non-ipv6 packet works
for all those cases.

Reported-by: Jianlin Shi <jishi@redhat.com>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>



Per: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c9fefa08190fc879fb2e681035d7774e0a8c5170
8 years ago
edrikk a86f6593f8 Similar problem as IPv4 being resolved here in IPv6 where if the mode is unknown we will skip initialization while returning zero. However, this
is harmless as the mode has already been checked further up the
stack.  This patch removes this anomaly by aligning the IPv6
behaviour with IPv4 and treating unknown modes (which cannot
actually happen) as transport mode.

Fixes: 38320c70d282 ("[IPSEC]: Use crypto_aead and authenc in ESP")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>


Per:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
edrikk 885e1c6273 xfrm: Return error on unknown encap_type in init_state
Currently esp will happily create an xfrm state with an unknown
encap type for IPv4, without setting the necessary state parameters.
This patch fixes it by returning -EINVAL.

Per:   https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bcfd09f7837f5240c30fd2f52ee7293516641faa
8 years ago
pedro 1006d4f83d dnsmasq: update to v2.79rc1-2018.02.16 8 years ago
pedro 6670a371f0 dropbear: move patch to separate directory
- based on AndreDVJ commit: f9434c77ce with small fix
8 years ago
AndreDVJ 2633f67553 ~/router/Makefile: updated to support ncurses 6.1 8 years ago
AndreDVJ a382e8450f libncurses: Updated to 6.1 8 years ago
AndreDVJ 2b3ad79f3a nettle: Updated to 3.4 8 years ago
pedro 9808417646 dnsmasq: update to v2.79rc1-2018.02.16 8 years ago
pedro 0e04e34355 dropbear: move patch to separate directory
- based on AndreDVJ commit: f9434c77ce with small fix
8 years ago
AndreDVJ a767196006 ~/router/Makefile: updated to support ncurses 6.1 8 years ago
AndreDVJ d2bb9d39f0 libncurses: Updated to 6.1 8 years ago
AndreDVJ 59bd6190da nettle: Updated to 3.4 8 years ago
kille72 2b8a028ddb /router/rc/services.c: miniupnpd - changed the coding to use an interface name for the listening_ip= value instead of an IP/netmask to prevent log flood
https://github.com/miniupnp/miniupnp/issues/272

Thanks @Sean B.
8 years ago
kille72 4073b30e33 miniupnpd: updated to 2.0.20180203 8 years ago
kille72 bfb985beaf /router/rc/services.c: miniupnpd - changed the coding to use an interface name for the listening_ip= value instead of an IP/netmask to prevent log flood
https://github.com/miniupnp/miniupnp/issues/272

Thanks @Sean B.
8 years ago
kille72 c4ae03b988 miniupnpd: updated to 2.0.20180203 8 years ago
kille72 9793d401c8 Merge branch 'shibby-arm' into shibby-arm7 8 years ago
AndreDVJ c4b3841d3b Patch for xl2tpd in a separate file 8 years ago