Jakub Kicinski
1c503dd09a
ipv6: weaken the v4mapped source check ...
[ Upstream commit dcc32f4f183ab8479041b23a1525d48233df1d43 ]
This reverts commit 6af1799aaf3f1bc8defedddfa00df3192445bbf3.
Commit 6af1799aaf3f ("ipv6: drop incoming packets having a v4mapped
source address") introduced an input check against v4mapped addresses.
Use of such addresses on the wire is indeed questionable and not
allowed on public Internet. As the commit pointed out
https://tools.ietf.org/html/draft-itojun-v6ops-v4mapped-harmful-02
lists potential issues.
Unfortunately there are applications which use v4mapped addresses,
and breaking them is a clear regression. For example v4mapped
addresses (or any semi-valid addresses, really) may be used
for uni-direction event streams or packet export.
Since the issue which sparked the addition of the check was with
TCP and request_socks in particular push the check down to TCPv6
and DCCP. This restores the ability to receive UDPv6 packets with
v4mapped address as the source.
Keep using the IPSTATS_MIB_INHDRERRORS statistic to minimize the
user-visible changes.
Fixes: 6af1799aaf3f ("ipv6: drop incoming packets having a v4mapped source address")
Reported-by: Sunyi Shao <sunyishao@fb.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Acked-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-04-07 12:05:38 +02:00
6lowpan: Off by one handling ->nexthdr
2020-01-29 10:24:22 +01:00
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
2020-11-10 10:23:54 +01:00
vlan: fix memory leak in vlan_dev_set_egress_priority
2020-01-12 11:24:27 +01:00
appletalk: Set error code if register_snap_client failed
2019-12-21 10:41:45 +01:00
atm: fix a memory leak of vcc->user_back
2020-10-01 20:40:12 +02:00
AX.25: Prevent integer overflows in connect and sendmsg
2020-07-31 16:44:06 +02:00
batman-adv: set .owner to THIS_MODULE
2020-12-02 08:31:27 +01:00
Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
2021-03-07 11:25:57 +01:00
net: bridge: vlan: fix error return code in __vlan_add()
2020-12-29 13:44:48 +01:00
caif: reduce stack size with KASAN
2019-05-08 07:19:07 +02:00
can: purge socket error queue on sock destruct
2019-07-10 09:55:33 +02:00
libceph: clear con->out_msg on Policy::stateful_server faults
2020-11-10 10:23:59 +01:00
can: dev: Move device back to init netns on owning netns delete
2021-03-30 14:41:42 +02:00
net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
2021-01-23 15:38:18 +01:00
ipv6: weaken the v4mapped source check
2021-04-07 12:05:38 +02:00
decnet: fix DN_IFREQ_SIZE
2019-12-05 15:35:12 +01:00
KEYS: DNS: fix parsing multiple options
2018-07-22 14:27:39 +02:00
net: dsa: tag_brcm: Fix skb->fwd_offload_mark location
2020-04-13 10:32:53 +02:00
net: add annotations on hh->hh_len lockless accesses
2020-01-12 11:24:19 +01:00
net/hsr: Check skb_put_padto() return value
2020-10-01 20:40:01 +02:00
nl802154: add missing attribute validation for dev_type
2020-03-20 09:07:39 +01:00
net: Fix gro aggregation for udp encaps with zero csum
2021-03-17 16:10:13 +01:00
ipv6: weaken the v4mapped source check
2021-04-07 12:05:38 +02:00
ipx: call ipxitf_put() in ioctl error path
2017-05-25 15:44:41 +02:00
irda: Only insert new objects into the global database via setsockopt
2018-09-15 09:43:01 +02:00
net/af_iucv: set correct sk_protocol for child sockets
2020-12-11 13:37:56 +01:00
kcm: switch order of device registration to fix a crash
2019-04-17 08:36:44 +02:00
af_key: relax availability checks for skb size calculation
2021-02-23 13:59:14 +01:00
l2tp: fix races with ipv4-mapped ipv6 addresses
2021-01-09 13:35:49 +01:00
net: ipv6: Remove l3mdev_get_saddr6
2016-09-10 23:12:53 -07:00
net: lapb: Copy the skb before sending a packet
2021-02-10 09:09:25 +01:00
llc: make sure applications use ARPHRD_ETHER
2020-07-22 09:10:47 +02:00
mac80211: fix double free in ibss_leave
2021-03-30 14:41:43 +02:00
mac802154: tx: fix use-after-free
2020-10-01 20:40:18 +02:00
net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
2021-03-17 16:10:13 +01:00
net/ncsi: Use real net-device for response handler
2021-01-12 19:49:01 +01:00
netfilter: x_tables: gpf inside xt_find_revision()
2021-03-17 16:10:13 +01:00
netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
2020-11-24 13:02:56 +01:00
genetlink: remove genl_bind
2020-07-22 09:10:48 +02:00
net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
2020-05-02 17:23:08 +02:00
NFC: fix possible resource leak
2021-02-03 23:19:52 +01:00
openvswitch: handle DNAT tuple collision
2020-10-14 09:48:16 +02:00
net/packet: fix overflow in tpacket_rcv
2020-10-14 09:48:13 +02:00
phonet: fix building with clang
2019-03-23 13:19:44 +01:00
net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
2021-03-30 14:41:42 +02:00
rds: Prevent kernel-infoleak in rds_notify_queue_get()
2020-08-21 11:01:49 +02:00
rfkill: Fix incorrect check to avoid NULL pointer dereference
2020-01-12 11:24:23 +01:00
rose: Fix Null pointer dereference in rose_send_frame()
2020-12-11 13:37:56 +01:00
rxrpc: Fix handling of an unsupported token type in rxrpc_read()
2021-01-23 15:38:19 +01:00
net: sched: validate stab values
2021-03-30 14:41:42 +02:00
sctp: change to hold/put transport for proto_unreach_timer
2020-11-24 13:02:58 +01:00
strparser: Fix incorrect strp->need_bytes value.
2018-04-29 11:32:02 +02:00
sunrpc: fix refcount leak for rpc auth modules
2021-03-24 10:59:23 +01:00
switchdev: Execute bridge ndos only for bridge ports
2016-10-19 10:58:04 -04:00
tipc: fix NULL deref in tipc_link_xmit()
2021-01-23 15:38:19 +01:00
skbuff: fix a data race in skb_queue_len()
2020-10-01 20:40:06 +02:00
selinux: vsock: Set SID for socket returned by accept()
2021-04-07 12:05:38 +02:00
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
2021-02-03 23:19:49 +01:00
net/x25: prevent a couple of overflows
2020-12-11 13:37:57 +01:00
xfrm: Fix oops in xfrm_replay_advance_bmp
2021-02-03 23:19:51 +01:00
net/compat: Add missing sock updates for SCM_RIGHTS
2020-08-21 11:02:08 +02:00
net: Set fput_needed iff FDPUT_FPUT is set
2020-08-21 11:02:04 +02:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2016-10-06 09:52:23 -07:00
1c503dd09a