Pablo Neira Ayuso a7f87b47e6 netfilter: remove defensive check on malformed packets from raw sockets ...

Users cannot forge malformed IPv4/IPv6 headers via raw sockets that they
can inject into the stack. Specifically, not for IPv4 since 55888dfb6b
("AF_RAW: Augment raw_send_hdrinc to expand skb to fit iphdr->ihl
(v2)"). IPv6 raw sockets also ensure that packets have a well-formed
IPv6 header available in the skbuff.

At quick glance, br_netfilter also validates layer 3 headers and it
drops malformed both IPv4 and IPv6 packets.

Therefore, let's remove this defensive check all over the place.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2018-01-08 18:11:04 +01:00

..

6lowpan

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

9p

make sock_alloc_file() do sock_release() on failures

2017-12-05 18:39:29 -05:00

802

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

8021q

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-12 09:17:05 +09:00

appletalk

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

atm

atm: mpoa: remove 32-bit timekeeping

2017-11-30 09:26:32 -05:00

ax25

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-04 09:26:51 +09:00

batman-adv

batman-adv: Convert packet.h to uapi header

2017-12-21 15:35:53 -05:00

bluetooth

Bluetooth: introduce DEFINE_SHOW_ATTRIBUTE() macro

2017-12-13 20:20:34 +01:00

bpf

bpf: add meta pointer for direct access

2017-09-26 13:36:44 -07:00

bridge

netfilter: remove struct nf_afinfo and its helper functions

2018-01-08 18:11:02 +01:00

caif

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

can

net: use rtnl_register_module where needed

2017-12-04 11:32:39 -05:00

ceph

Merge tag 'ceph-for-4.15-rc1' of git://github.com/ceph/ceph-client

2017-11-21 05:38:32 -10:00

core

bpf: finally expose xdp_rxq_info to XDP bpf-programs

2018-01-05 15:21:22 -08:00

dcb

rtnetlink: make rtnl_register accept a flags parameter

2017-08-09 16:57:38 -07:00

dccp

net: dccp: Remove dccpprobe module

2018-01-02 14:27:30 -05:00

decnet

net: use rtnl_register_module where needed

2017-12-04 11:32:39 -05:00

dns_resolver

KEYS: Fix race between updating and finding a negative key

2017-10-18 09:12:40 +01:00

dsa

net: dsa: Move padding into Broadcom tagger

2018-01-05 11:21:31 -05:00

ethernet

networking: make skb_push & __skb_push return void pointers

2017-06-16 11:48:40 -04:00

hsr

net: hsr: Convert timers to use timer_setup()

2017-10-25 13:00:27 +09:00

ieee802154

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-04 09:26:51 +09:00

ife

MAINTAINERS: Update Yotam's E-mail

2017-11-01 12:19:03 +09:00

ipv4

netfilter: remove defensive check on malformed packets from raw sockets

2018-01-08 18:11:04 +01:00

ipv6

netfilter: remove defensive check on malformed packets from raw sockets

2018-01-08 18:11:04 +01:00

ipx

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-04 09:26:51 +09:00

iucv

iucv: Convert sk_wmem_alloc accesses to refcount_t.

2017-07-03 02:31:22 -07:00

kcm

make sock_alloc_file() do sock_release() on failures

2017-12-05 18:39:29 -05:00

key

af_key: replace BUG_ON on WARN_ON in net_exit hook

2017-11-14 15:45:52 +09:00

l2tp

l2tp: remove configurable payload offset

2018-01-05 11:03:19 -05:00

l3mdev

…

lapb

treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts

2017-11-21 16:35:54 -08:00

llc

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2017-11-15 11:56:19 -08:00

mac80211

Merge tag 'mac80211-next-for-davem-2018-01-04' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

2018-01-04 14:33:29 -05:00

mac802154

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-04 09:26:51 +09:00

mpls

net: use rtnl_register_module where needed

2017-12-04 11:32:39 -05:00

ncsi

net/ncsi: Don't take any action on HNCDSC AEN

2017-12-18 14:50:11 -05:00

netfilter

netfilter: remove defensive check on malformed packets from raw sockets

2018-01-08 18:11:04 +01:00

netlabel

net/netlabel: Add list_next_rcu() in rcu_dereference().

2017-11-18 10:32:41 +09:00

netlink

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-12-16 22:11:55 -05:00

netrom

treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts

2017-11-21 16:35:54 -08:00

nfc

treewide: setup_timer() -> timer_setup()

2017-11-21 15:57:07 -08:00

nsh

openvswitch: enable NSH support

2017-11-08 16:12:33 +09:00

openvswitch

openvswitch: drop unneeded newline

2018-01-02 13:49:53 -05:00

packet

net: Add asynchronous callbacks for xfrm on layer 2.

2017-12-20 10:41:36 +01:00

phonet

net: use rtnl_register_module where needed

2017-12-04 11:32:39 -05:00

psample

MAINTAINERS: Update Yotam's E-mail

2017-11-01 12:19:03 +09:00

qrtr

net: use rtnl_register_module where needed

2017-12-04 11:32:39 -05:00

rds

rds: use RCU to synchronize work-enqueue with connection teardown

2018-01-05 13:39:18 -05:00

rfkill

net: rfkill: gpio: Switch to devm_acpi_dev_add_driver_gpios()

2017-06-13 11:07:51 +02:00

rose

treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts

2017-11-21 16:35:54 -08:00

rxrpc

rxrpc: Use correct netns source in rxrpc_release_sock()

2017-12-03 10:05:20 -05:00

sched

net: sched: fix skb leak in dev_requeue_skb()

2018-01-02 13:48:29 -05:00

sctp

net: sctp: Remove debug SCTP probe module

2018-01-02 14:27:29 -05:00

smc

smc: support variable CLC proposal messages

2017-12-07 15:03:12 -05:00

strparser

strparser: Call sock_owned_by_user_nocheck

2017-12-28 14:28:22 -05:00

sunrpc

Merge tag 'nfs-for-4.15-3' of git://git.linux-nfs.org/projects/anna/linux-nfs

2017-12-16 13:12:53 -08:00

switchdev

net: bridge: Add/del switchdev object on host join/leave

2017-11-10 13:41:40 +09:00

tipc

tipc: simplify small window members' sorting algorithm

2018-01-05 13:37:03 -05:00

tls

tls: don't override sk_write_space if tls_set_sw_offload fails.

2017-11-14 16:26:35 +09:00

unix

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-11-04 09:26:51 +09:00

vmw_vsock

VSOCK: fix outdated sk_state value in hvs_release()

2017-12-05 15:07:37 -05:00

wimax

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

wireless

Merge tag 'mac80211-next-for-davem-2018-01-04' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

2018-01-04 14:33:29 -05:00

x25

treewide: Remove TIMER_FUNC_TYPE and TIMER_DATA_TYPE casts

2017-11-21 16:35:54 -08:00

xfrm

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-12-29 15:42:26 -05:00

compat.c

net: compat: assert the size of cmsg copied in is as expected

2017-09-20 15:36:18 -07:00

Kconfig

netfilter: don't allocate space for arp/bridge hooks unless needed

2018-01-08 18:01:11 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

socket.c

sock: Move the socket inuse to namespace.

2017-12-19 09:58:14 -05:00

sysctl_net.c

sysctl: Remove dead register_sysctl_root

2017-04-16 23:42:49 -05:00