Eric Dumazet bebd876038 netfilter: ip6t_REJECT: fix a dst leak in ipv6 REJECT ...

commit 499031ac8a upstream.

We should release dst if dst->error is set.

Bug introduced in 2.6.14 by commit e104411b82
([XFRM]: Always release dst_entry on error in xfrm_lookup)

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2010-08-02 10:20:50 -07:00

..

ip6_queue.c

netfilter: queue: use NFPROTO_ for queue callsites

2009-05-08 10:30:46 +02:00

ip6_tables.c

netfilter: xtables: compat out of scope fix

2010-02-23 07:37:53 -08:00

ip6t_ah.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_eui64.c

netfilter: ip6t_eui: fix read outside array bounds

2009-08-31 15:30:31 +02:00

ip6t_frag.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_hbh.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_ipv6header.c

netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE

2009-05-05 15:32:16 +02:00

ip6t_LOG.c

netfilter: use a linked list of loggers

2009-03-16 14:54:21 +01:00

ip6t_mh.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6t_REJECT.c

netfilter: ip6t_REJECT: fix a dst leak in ipv6 REJECT

2010-08-02 10:20:50 -07:00

ip6t_rt.c

netfilter: xtables: move extension arguments into compound structure (2/6)

2008-10-08 11:35:18 +02:00

ip6table_filter.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

ip6table_mangle.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

ip6table_raw.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

ip6table_security.c

netfilter: xtables: mark initial tables constant

2009-08-24 14:56:30 +02:00

Kconfig

netfilter: trivial Kconfig spelling fixes

2009-03-24 13:35:27 -07:00

Makefile

netfilter: Combine ipt_ttl and ip6t_hl source

2009-02-18 18:39:31 +01:00

nf_conntrack_l3proto_ipv6.c

netfilter: fix crashes in bridge netfilter caused by fragment jumps

2010-01-06 15:04:40 -08:00

nf_conntrack_proto_icmpv6.c

netfilter: nf_ct_icmp: keep the ICMP ct entries longer

2009-06-08 15:53:43 +02:00

nf_conntrack_reasm.c

ipv6: conntrack: Add member of user to nf_ct_frag6_queue structure

2010-03-15 08:49:39 -07:00