Florian Westphal 3c79107631 netfilter: ctnetlink: don't use conntrack/expect object addresses as id ...

else, we leak the addresses to userspace via ctnetlink events
and dumps.

Compute an ID on demand based on the immutable parts of nf_conn struct.

Another advantage compared to using an address is that there is no
immediate re-use of the same ID in case the conntrack entry is freed and
reallocated again immediately.

Fixes: 3583240249 ("[NETFILTER]: nf_conntrack_expect: kill unique ID")
Fixes: 7f85f91472 ("[NETFILTER]: nf_conntrack: kill unique ID")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2019-04-15 07:31:44 +02:00

..

9p

…

bluetooth

Bluetooth: Add quirk for reading BD_ADDR from fwnode property

2019-02-26 10:08:26 +01:00

caif

…

iucv

…

netfilter

netfilter: ctnetlink: don't use conntrack/expect object addresses as id

2019-04-15 07:31:44 +02:00

netns

netns: provide pure entropy for net_hash_mix()

2019-03-28 17:00:45 -07:00

nfc

nfc: nci: Potential off by one in ->pipes[] array

2019-04-06 15:05:07 -07:00

phonet

phonet: fix building with clang

2019-02-21 16:23:56 -08:00

sctp

sctp: get sctphdr by offset in sctp_compute_cksum

2019-03-18 18:16:12 -07:00

tc_act

net/sched: don't dereference a->goto_chain to read the chain index

2019-03-21 13:26:42 -07:00

6lowpan.h

…

act_api.h

net/sched: let actions use RCU to access 'goto_chain'

2019-03-21 13:26:42 -07:00

addrconf.h

ipv6_stub: add ipv6_route_input stub/proxy.

2019-02-13 18:27:55 -08:00

af_ieee802154.h

…

af_rxrpc.h

rxrpc: Make rxrpc_kernel_check_life() indicate if call completed

2019-04-12 16:57:23 -07:00

af_unix.h

net: split out functions related to registering inflight socket files

2019-02-28 08:24:23 -07:00

af_vsock.h

…

ah.h

…

arp.h

…

atmclip.h

…

ax25.h

ax25: fix possible use-after-free

2019-01-23 11:18:00 -08:00

ax88796.h

…

bond_3ad.h

bonding: count master 3ad stats separately

2019-01-24 22:18:48 -08:00

bond_alb.h

…

bond_options.h

…

bonding.h

…

busy_poll.h

…

calipso.h

…

cfg80211-wext.h

…

cfg80211.h

cfg80211: add ratelimited variants of err and warn

2019-04-08 13:31:24 +02:00

cfg802154.h

…

checksum.h

Remove 'type' argument from access_ok() function

2019-01-03 18:57:57 -08:00

cipso_ipv4.h

…

cls_cgroup.h

…

codel_impl.h

…

codel_qdisc.h

…

codel.h

…

compat.h

…

datalink.h

…

dcbevent.h

…

dcbnl.h

…

devlink.h

devlink: Add support for direct reporter health state update

2019-03-04 11:00:43 -08:00

dn_dev.h

…

dn_fib.h

…

dn_neigh.h

…

dn_nsp.h

…

dn_route.h

…

dn.h

…

dsa.h

net: dsa: add KSZ9893 switch tagging support

2019-03-03 13:48:49 -08:00

dsfield.h

…

dst_cache.h

…

dst_metadata.h

…

dst_ops.h

…

dst.h

…

erspan.h

…

esp.h

…

ethoc.h

…

failover.h

…

fib_notifier.h

…

fib_rules.h

…

firewire.h

…

flow_dissector.h

…

flow_offload.h

flow_offload: fix block stats

2019-02-13 21:07:47 -08:00

flow.h

route: Add multipath_hash in flowi_common to make user-define hash

2019-02-27 12:50:17 -08:00

fou.h

…

fq_impl.h

…

fq.h

…

garp.h

…

gen_stats.h

…

genetlink.h

…

geneve.h

…

gre.h

…

gro_cells.h

…

gtp.h

…

gue.h

…

hwbm.h

…

icmp.h

net: Add __icmp_send helper.

2019-02-25 14:32:35 -08:00

ieee80211_radiotap.h

Merge tag 'wireless-drivers-next-for-davem-2019-02-22' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

2019-02-22 12:56:24 -08:00

ieee802154_netdev.h

…

if_inet6.h

…

ife.h

…

ila.h

…

inet6_connection_sock.h

…

inet6_hashtables.h

…

inet_common.h

…

inet_connection_sock.h

tcp: change pingpong threshold to 3

2019-01-27 13:29:43 -08:00

inet_ecn.h

…

inet_frag.h

net: remove unused struct inet_frag_queue.fragments field

2019-02-26 08:27:05 -08:00

inet_hashtables.h

net: dccp: fix kernel crash on module load

2018-12-24 15:27:56 -08:00

inet_sock.h

…

inet_timewait_sock.h

…

inetpeer.h

net: ipv4: use a dedicated counter for icmp_v4 redirect packets

2019-02-08 21:50:15 -08:00

ip6_checksum.h

…

ip6_fib.h

…

ip6_route.h

…

ip6_tunnel.h

…

ip_fib.h

net: ipv4: Fix memory leak in network namespace dismantle

2019-01-15 13:33:44 -08:00

ip_tunnels.h

route: Add multipath_hash in flowi_common to make user-define hash

2019-02-27 12:50:17 -08:00

ip_vs.h

ipvs: avoid indirect calls when calculating checksums

2019-01-28 11:15:58 +01:00

ip.h

vrf: check accept_source_route on the original netdevice

2019-04-01 10:44:58 -07:00

ipcomp.h

…

ipconfig.h

…

ipv6_frag.h

net: IP6 defrag: use rbtrees for IPv6 defrag

2019-01-25 21:37:11 -08:00

ipv6.h

…

ipx.h

…

iw_handler.h

…

kcm.h

…

l3mdev.h

ipvlan, l3mdev: fix broken l3s mode wrt local routes

2019-01-30 22:13:34 -08:00

lag.h

…

lapb.h

…

lib80211.h

…

llc_c_ac.h

…

llc_c_ev.h

…

llc_c_st.h

…

llc_conn.h

…

llc_if.h

…

llc_pdu.h

…

llc_s_ac.h

…

llc_s_ev.h

…

llc_s_st.h

…

llc_sap.h

…

llc.h

…

lwtunnel.h

bpf: implement BPF_LWT_ENCAP_IP mode in bpf_lwt_push_encap

2019-02-13 18:27:55 -08:00

mac80211.h

mac80211: make ieee80211_schedule_txq schedule empty TXQs

2019-04-08 13:31:31 +02:00

mac802154.h

…

mip6.h

…

mld.h

…

mpls_iptunnel.h

…

mpls.h

…

mrp.h

…

ncsi.h

…

ndisc.h

…

neighbour.h

…

net_failover.h

…

net_namespace.h

netns: provide pure entropy for net_hash_mix()

2019-03-28 17:00:45 -07:00

net_ratelimit.h

…

netevent.h

…

netlabel.h

…

netlink.h

netlink: reduce NLA_POLICY_NESTED{,_ARRAY} arguments

2019-02-01 11:06:55 +01:00

netprio_cgroup.h

…

netrom.h

net: netrom: Fix error cleanup path of nr_proto_init

2019-04-11 13:59:49 -07:00

nexthop.h

…

nl802154.h

…

nsh.h

…

p8022.h

…

page_pool.h

…

ping.h

…

pkt_cls.h

net: sched: set dedicated tcf_walker flag when tp is empty

2019-02-25 10:18:17 -08:00

pkt_sched.h

…

pptp.h

…

protocol.h

…

psample.h

…

psnap.h

…

raw.h

…

rawv6.h

…

red.h

…

regulatory.h

…

request_sock.h

net: keep refcount warning in reqsk_free()

2019-03-09 19:51:44 -08:00

rose.h

…

route.h

…

rsi_91x.h

…

rtnetlink.h

…

sch_generic.h

net: sched: introduce and use qdisc tree flush/purge helpers

2019-04-01 14:50:13 -07:00

scm.h

…

secure_seq.h

…

seg6_hmac.h

…

seg6_local.h

…

seg6.h

net: seg6.h: remove an unused #include

2018-12-20 16:56:04 -08:00

slhc_vj.h

…

smc.h

net/smc: add smcd support to the pnet table

2019-02-21 10:34:37 -08:00

snmp.h

…

sock_reuseport.h

…

sock.h

net/smc: propagate file from SMC to TCP socket

2019-04-11 11:04:08 -07:00

Space.h

…

stp.h

…

strparser.h

…

switchdev.h

switchdev: Remove unused transaction item queue

2019-03-01 21:35:19 -08:00

tcp_states.h

…

tcp.h

tcp: convert tcp_md5_needed to static_branch API

2019-02-26 13:16:03 -08:00

timewait_sock.h

…

tipc.h

…

tls.h

net/tls: prevent bad memory access in tls_is_sk_tx_device_offloaded()

2019-04-10 22:42:28 -07:00

transp_v6.h

…

tso.h

…

tun_proto.h

…

udp_tunnel.h

…

udp.h

…

udplite.h

…

vsock_addr.h

…

vxlan.h

vxlan: add extack support for create and changelink

2019-02-26 08:54:37 -08:00

wext.h

…

wimax.h

…

x25.h

…

x25device.h

…

xdp_sock.h

xsk: fix umem memory leak on cleanup

2019-03-16 01:27:51 +01:00

xdp.h

…

xfrm.h

xfrm: destroy xfrm_state synchronously on net exit path

2019-02-05 06:29:20 +01:00