Re: [stable] [PATCH 1/2] netfilter: IPv6: initialize TOS field in REJECT target module

[Greg KH <greg@kroah.com>]

On Tue, Jun 07, 2011 at 11:39:33AM +0900, Fernando Luis Vázquez Cao wrote:
> On Mon, 2011-06-06 at 10:36 -0700, Greg KH wrote:
> > On Mon, Jun 06, 2011 at 02:41:10AM +0200, pablo@netfilter.org wrote:
> > > From: Fernando Luis Vazquez Cao <fernando@oss.ntt.co.jp>
> > > 
> > > The IPv6 header is not zeroed out in alloc_skb so we must initialize
> > > it properly unless we want to see IPv6 packets with random TOS fields
> > > floating around. The current implementation resets the flow label
> > > but this could be changed if deemed necessary.
> > > 
> > > We stumbled upon this issue when trying to apply a mangle rule to
> > > the RST packet generated by the REJECT target module.
> > > 
> > > The following Linux kernels are affected: <= 2.6.38.8
> > > 
> > > Cc: stable@kernel.org
> > > Signed-off-by: Fernando Luis Vazquez Cao <fernando@oss.ntt.co.jp>
> > > Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
> > > (cherry picked from commit 4319cc0cf5bb894b7368008cdf6dd20eb8868018)
> > 
> > So, what kernel(s) are you wanting this to be applied to?
> 
> Both patches fix bugs that have present from day one, so, ideally, I
> would like to have them applied to all the stable and longterm kernels:
> 
> linux-2.6.38.8
> linux-2.6.37.6
> linux-2.6.36.4
> linux-2.6.35.13
> linux-2.6.34.9
> linux-2.6.33.14
> linux-2.6.32.41
> linux-2.6.27.59
> 
> > Should I just take the upstream
> > 4319cc0cf5bb894b7368008cdf6dd20eb8868018, or does your backport do
> > something different here?
> 
> [PATCH 1/2] netfilter: IPv6: initialize TOS field in REJECT target module
> For linux-2.6.38.8 you can take the upstream
> 4319cc0cf5bb894b7368008cdf6dd20eb8868018. For linux-2.6.37.6,
> linux-2.6.36.4, linux-2.6.35.13, linux-2.6.34.9, linux-2.6.33.14,
> linux-2.6.32.41, and linux-2.6.27.59 you will need to use the attached
> backport.

Ok, but this doesn't apply at all to the 2.6.39-stable kernel.

And .38-stable is end-of-life, as is .36-stable and .37-stable.

So, care to start all over again?

I need patches that apply to the .39-stable tree.

And then to any other stable kernel that you wish to have them apply to.
Currently "live" kernels are .32-longterm, .33-longterm, .34-longterm,
and .35-longterm.

thanks,

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html