Patrick McHardy 124dff01af netfilter: don't reset nf_trace in nf_reset() ... Commit 130549fe ("netfilter: reset nf_trace in nf_reset") added code to reset nf_trace in nf_reset(). This is wrong and unnecessary. nf_reset() is used in the following cases: - when passing packets up the the socket layer, at which point we want to release all netfilter references that might keep modules pinned while the packet is queued. nf_trace doesn't matter anymore at this point. - when encapsulating or decapsulating IPsec packets. We want to continue tracing these packets after IPsec processing. - when passing packets through virtual network devices. Only devices on that encapsulate in IPv4/v6 matter since otherwise nf_trace is not used anymore. Its not entirely clear whether those packets should be traced after that, however we've always done that. - when passing packets through virtual network devices that make the packet cross network namespace boundaries. This is the only cases where we clearly want to reset nf_trace and is also what the original patch intended to fix. Add a new function nf_reset_trace() and use it in dev_forward_skb() to fix this properly. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-04-05 15:38:10 -04:00
..
9p	Revert parts of "hlist: drop the node parameter from iterators"	2013-03-08 15:05:34 -08:00
802	mrp: make mrp_rcv static	2013-02-11 14:16:26 -05:00
8021q	8021q: fix a potential use-after-free	2013-03-24 17:27:28 -04:00
appletalk	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
atm	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
ax25	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
batman-adv	batman-adv: verify tt len does not exceed packet len	2013-03-11 22:59:47 +01:00
bluetooth	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth	2013-03-18 15:17:11 -04:00
bridge	bridge: fix crash when set mac address of br interface	2013-03-24 17:27:28 -04:00
caif	CAIF: fix sparse warning for caif_usb	2013-03-04 14:12:07 -05:00
can	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
ceph	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client	2013-03-12 09:22:42 -07:00
core	netfilter: don't reset nf_trace in nf_reset()	2013-04-05 15:38:10 -04:00
dcb	dcbnl: fix various netlink info leaks	2013-03-10 05:19:26 -04:00
dccp	Driver core patches for 3.9-rc1	2013-02-21 12:05:51 -08:00
decnet	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
dns_resolver	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2012-12-16 15:40:50 -08:00
dsa	dsa: make dsa_switch_setup check for valid port names	2013-01-21 15:40:12 -05:00
ethernet	net: split eth_mac_addr for better error handling	2013-01-21 14:07:44 -05:00
ieee802154	6lowpan: Fix endianness issue in is_addr_link_local().	2013-03-10 16:49:35 -04:00
ipv4	net: ipv4: notify when address lifetime changes	2013-04-05 00:51:12 -04:00
ipv6	Merge branch 'master' of git://1984.lsi.us.es/nf	2013-04-04 17:41:53 -04:00
ipx	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
irda	net/irda: add missing error path release_sock call	2013-03-20 12:23:13 -04:00
iucv	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
key	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2013-03-27 14:07:04 -04:00
l2tp	l2tp: unhash l2tp sessions on delete, not on free	2013-03-20 12:10:39 -04:00
lapb	net/lapb: remove depends on CONFIG_EXPERIMENTAL	2013-01-11 11:40:01 -08:00
llc	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
mac80211	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211	2013-04-01 15:09:28 -04:00
mac802154	Driver core patches for 3.9-rc1	2013-02-21 12:05:51 -08:00
netfilter	netfilter: nf_conntrack: fix error return code	2013-03-27 18:31:17 +01:00
netlabel	netlabel: fix build problems when CONFIG_IPV6=n	2013-03-08 11:33:51 -05:00
netlink	genetlink: trigger BUG_ON if a group name is too long	2013-03-20 12:05:51 -04:00
netrom	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
nfc	NFC: llcp: Keep the connected socket parent pointer alive	2013-03-26 14:35:57 +01:00
openvswitch	Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch	2013-03-15 09:00:39 -04:00
packet	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
phonet	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
rds	net/rds: zero last byte for strncpy	2013-03-08 00:35:44 -05:00
rfkill	rfkill: don't use [delayed_]work_pending()	2012-12-28 13:40:16 -08:00
rose	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
rxrpc	Driver core patches for 3.9-rc1	2013-02-21 12:05:51 -08:00
sched	cbq: incorrect processing of high limits	2013-04-02 14:29:20 -04:00
sctp	sctp: don't break the loop while meeting the active_path so as to find the matched transport	2013-03-13 10:09:55 -04:00
sunrpc	NFS client bugfixes for Linux 3.9	2013-03-26 14:23:45 -07:00
tipc	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
unix	af_unix: If we don't care about credentials coallesce all messages	2013-04-05 00:49:13 -04:00
vmw_vsock	VSOCK: Handle changes to the VMCI context ID.	2013-04-02 14:39:17 -04:00
wimax
wireless	Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211	2013-03-25 14:50:17 -04:00
x25	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
xfrm	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2013-03-27 14:07:04 -04:00
compat.c
Kconfig	Driver core patches for 3.9-rc1	2013-02-21 12:05:51 -08:00
Makefile	VSOCK: Introduce VM Sockets	2013-02-10 19:41:08 -05:00
nonet.c
socket.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-02-26 20:16:07 -08:00
sysctl_net.c