Florian Westphal af8d6ae09c netfilter: nf_reject: skip iphdr options when looking for icmp header ...

Not a big deal but this hould have used the real ip header length and not the
base header size.  As-is, if there are options then
nf_skb_is_icmp_unreach() result will be random.

Fixes: db99b2f2b3 ("netfilter: nf_reject: don't reply to icmp error messages")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2026-06-21 00:18:27 +02:00

..

arp_tables.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-06-11 14:33:35 -07:00

arpt_mangle.c

netfilter: arp_tables: fix IEEE1394 ARP payload parsing

2026-04-21 12:44:39 +02:00

arptable_filter.c

netfilter: x_tables: close dangling table module init race

2026-05-08 01:30:17 +02:00

ip_tables.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-06-11 14:33:35 -07:00

ipt_ah.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

ipt_ECN.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-06-22 08:59:24 -04:00

ipt_REJECT.c

netfilter: use actual socket sk for REJECT action

2020-12-01 14:33:55 +01:00

ipt_rpfilter.c

ipv4: Convert ->flowi4_tos to dscp_t.

2025-08-26 17:34:31 -07:00

ipt_SYNPROXY.c

netfilter: Add MODULE_DESCRIPTION entries to kernel modules

2020-06-25 00:50:31 +02:00

iptable_filter.c

netfilter: x_tables: close dangling table module init race

2026-05-08 01:30:17 +02:00

iptable_mangle.c

netfilter: x_tables: close dangling table module init race

2026-05-08 01:30:17 +02:00

iptable_nat.c

netfilter: x_tables: add and use xtables_unregister_table_exit

2026-05-08 01:30:16 +02:00

iptable_raw.c

netfilter: x_tables: close dangling table module init race

2026-05-08 01:30:17 +02:00

iptable_security.c

netfilter: x_tables: close dangling table module init race

2026-05-08 01:30:17 +02:00

Kconfig

netfilter: add back NETFILTER_XTABLES dependencies

2025-08-07 13:19:25 +02:00

Makefile

netfilter: add option for GCOV profiling

2026-05-24 22:55:47 +02:00

nf_defrag_ipv4.c

netfilter: add missing module descriptions

2023-11-08 13:52:32 +01:00

nf_dup_ipv4.c

ipv4: Convert ->flowi4_tos to dscp_t.

2025-08-26 17:34:31 -07:00

nf_nat_h323.c

Merge tag 'nf-next-26-06-14' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next

2026-06-15 14:09:57 -07:00

nf_nat_pptp.c

netfilter: conntrack: check NULL when retrieving ct extension

2026-06-14 12:51:55 +02:00

nf_nat_snmp_basic_main.c

netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper

2026-06-05 13:25:18 +02:00

nf_nat_snmp_basic.asn1

treewide: Add SPDX identifier to IETF ASN.1 modules

2023-10-27 18:04:28 +08:00

nf_reject_ipv4.c

netfilter: nf_reject: skip iphdr options when looking for icmp header

2026-06-21 00:18:27 +02:00

nf_socket_ipv4.c

netfilter: nf_socket: skip socket lookup for non-first fragments

2026-04-30 17:59:01 +02:00

nf_tproxy_ipv4.c

tcp: Don't pass hashinfo to socket lookup helpers.

2025-08-25 17:53:35 -07:00

nft_dup_ipv4.c

netfilter: nf_tables: remove register tracking infrastructure

2026-02-25 19:36:26 -08:00

nft_fib_ipv4.c

netfilter: nft_fib: fix stale stack leak via the OIFNAME register

2026-06-10 18:00:19 +02:00

nft_reject_ipv4.c

netfilter: nf_tables: remove register tracking infrastructure

2026-02-25 19:36:26 -08:00