Marco Angaroni f0608ceaa7 netfilter: nf_ct_sip: correct allowed characters in Call-ID SIP header ... Current parsing methods for SIP header Call-ID do not check correctly all characters allowed by RFC 3261. In particular "," character is allowed instead of "'" character. As a result Call-ID headers like the following are discarded by IPVS SIP persistence engine. Call-ID: -.!%*_+`'~()<>:\"/[]?{} Above example is composed using all non-alphanumeric characters listed in RFC 3261 for Call-ID header syntax. Proposed fix is in nf_conntrack_sip module; function iswordc() checks this range: (c >= '(' && c <= '/') which includes these characters: ()*+,-./ They are all allowed except ",". Instead "'" is not included in the list. Below is an extract of relevant SIP ABNF syntax. Call-ID = ( "Call-ID" / "i" ) HCOLON callid callid = word [ "@" word ] HCOLON = *( SP / HTAB ) ":" SWS SWS = [LWS] ; sep whitespace LWS = [*WSP CRLF] 1*WSP ; linear whitespace WSP = SP / HTAB word = 1*(alphanum / "-" / "." / "!" / "%" / "*" / "_" / "+" / "`" / "'" / "~" / "(" / ")" / "<" / ">" / ":" / "\" / DQUOTE / "/" / "[" / "]" / "?" / "{" / "}" ) Signed-off-by: Marco Angaroni <marcoangaroni@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2016-09-07 10:37:58 +02:00
..
6lowpan	6lowpan: ndisc: set invalid unicast short addr to unspec	2016-07-08 13:23:12 +02:00
9p	9p/trans_virtio: use kvfree() for iov_iter_get_pages_alloc()	2016-08-09 13:42:36 +03:00
802
8021q	net: remove type_check from dev_get_nest_level()	2016-08-13 15:15:54 -07:00
appletalk
atm	net: atm: remove redundant null pointer check on dev->name	2016-08-18 21:03:48 -07:00
ax25	AX.25: Close socket connection on session completion	2016-06-18 20:55:34 -07:00
batman-adv	batman: make netlink attributes const	2016-09-01 14:09:00 -07:00
bluetooth	Bluetooth: Fix hci_sock_recvmsg when MSG_TRUNC is not set	2016-08-25 20:58:47 +02:00
bridge	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2016-09-06 12:45:26 -07:00
caif	caif: Remove unneeded header file	2016-06-28 05:26:14 -04:00
can	can: only call can_stat_update with procfs	2016-06-23 11:23:49 +02:00
ceph	libceph: using kfree_rcu() to simplify the code	2016-08-08 21:41:42 +02:00
core	netns: avoid disabling irq for netns id	2016-09-04 11:39:59 -07:00
dcb
dccp	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-07-29 17:38:46 -07:00
decnet	net: fix decnet rtnexthop parsing	2016-07-05 14:08:47 -07:00
dns_resolver
dsa	net: dsa: add MDB support	2016-08-31 14:15:42 -07:00
ethernet
hsr	net/hsr: Use setup_timer and mod_timer.	2016-05-16 14:00:43 -04:00
ieee802154	ieee802154: 6lowpan: fix intra pan id check	2016-07-08 13:23:12 +02:00
ipv4	netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter	2016-09-07 10:36:52 +02:00
ipv6	Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2016-09-06 12:45:26 -07:00
ipx
irda	net/irda: remove pointless assignment/check	2016-08-19 18:07:24 -07:00
iucv	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-07-29 17:38:46 -07:00
kcm	kcm: Remove TCP specific references from kcm and strparser	2016-08-28 23:32:41 -04:00
key
l2tp	l2tp: make nla_policy const	2016-09-01 14:09:01 -07:00
l3mdev	net: vrf: Implement get_saddr for IPv6	2016-06-17 21:25:29 -07:00
lapb	net/lapb: tuse %*ph to dump buffers	2016-05-29 22:33:25 -07:00
llc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-09 15:59:24 -04:00
mac80211	mac80211: call get_expected_throughput only after adding station	2016-08-11 20:00:37 +02:00
mac802154
mpls	mpls: get rid of trivial returns	2016-09-01 10:13:15 -07:00
ncsi	net/ncsi: avoid maybe-uninitialized warning	2016-07-25 10:32:59 -07:00
netfilter	netfilter: nf_ct_sip: correct allowed characters in Call-ID SIP header	2016-09-07 10:37:58 +02:00
netlabel	netlabel: Implement CALIPSO config functions for SMACK.	2016-06-27 15:06:18 -04:00
netlink	net: make genetlink ctrl ops const	2016-09-01 14:09:00 -07:00
netrom
nfc	NFC: digital: Fix RTOX supervisor PDU handling	2016-07-11 02:02:03 +02:00
openvswitch	openvswitch: Free tmpl with tmpl_free.	2016-09-04 11:38:10 -07:00
packet	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-07-24 00:53:32 -04:00
phonet
qrtr	Merge tag 'qcom-soc-for-4.7-2' into net-next	2016-05-17 14:11:19 -04:00
rds	RDS: add __printf format attribute to error reporting functions	2016-08-08 16:16:21 -07:00
rfkill
rose	rose: limit sk_filter trim to payload	2016-07-13 11:53:40 -07:00
rxrpc	rxrpc Move enum rxrpc_command to sendmsg.c	2016-09-04 21:41:39 +01:00
sched	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-08-30 00:54:02 -04:00
sctp	sctp: fix overrun in sctp_diag_dump_one()	2016-08-23 17:22:53 -07:00
strparser	kcm: Remove TCP specific references from kcm and strparser	2016-08-28 23:32:41 -04:00
sunrpc	NFS client bugfixes for Linux 4.8	2016-08-12 12:32:24 -07:00
switchdev	rtnetlink: fdb dump: optimize by saving last interface markers	2016-09-01 16:56:15 -07:00
tipc	tipc: send broadcast nack directly upon sequence gap detection	2016-09-02 17:10:25 -07:00
unix	af_unix: charge buffers to kmemcg	2016-07-26 16:19:19 -07:00
vmw_vsock	vhost/vsock: drop space available check for TX vq	2016-08-15 05:05:21 +03:00
wimax
wireless	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-08-18 01:17:32 -04:00
x25	net: fix a kernel infoleak in x25 module	2016-05-09 22:45:33 -04:00
xfrm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-09 15:59:24 -04:00
compat.c	packet: compat support for sock_fprog	2016-06-09 23:41:03 -07:00
Kconfig	strparser: Stream parser for messages	2016-08-17 19:36:23 -04:00
Makefile	strparser: Stream parser for messages	2016-08-17 19:36:23 -04:00
socket.c	fs: poll/select/recvmmsg: use timespec64 for timeout events	2016-05-19 19:12:14 -07:00
sysctl_net.c	net: make net namespace sysctls belong to container's owner	2016-08-14 21:08:58 -07:00