Florian Westphal (4): netfilter: ipvs: prepare for hook function reduction netfilter: ipvs: remove unneeded output wrappers netfilter: ipvs: remove unneeded input wrappers netfilter: ipvs: merge ipv4 + ipv6 icmp reply handlers Julian Anastasov (9): ipvs: skip ipv6 extension headers for csum checks ipvs: fix the checksum validations ipvs: fix more places with wrong ipv6 transport offsets ipvs: ensure inner headers in ICMP errors are in headroom ipvs: fix places with wrong packet offsets ipvs: do not mangle ICMP replies for non-first fragments ipvs: avoid out-of-bounds write in ip_vs_nat_icmp ipvs: return the csum validation for forward hook ipvs: revalidate ihl to prevent out-of-bounds access Yizhou Zhao (1): ipvs: fix PMTU for GUE/GRE tunnel ICMP errors include/net/ip6_fib.h | 2 + include/net/ip_vs.h | 38 +++- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_core.c | 416 +++++++++++++--------------------- net/netfilter/ipvs/ip_vs_proto_sctp.c | 29 ++- net/netfilter/ipvs/ip_vs_proto_tcp.c | 59 +---- net/netfilter/ipvs/ip_vs_proto_udp.c | 64 ++---- net/netfilter/ipvs/ip_vs_xmit.c | 43 +++- 8 files changed, 268 insertions(+), 393 deletions(-) -- 2.9.5