netdev - Linux 4.6: VRF clarification for egress Broadcast Pk

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Sat, 13 Jan 2018 17:31:48 +0000
From:   Sukumar Gopalakrishnan <sukumarg@...remeNetworks.com>
To:     "netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: Linux 4.6: VRF clarification for egress Broadcast Pk

Hi,

VRF egress processing routine does not process multicast packet but broadcast packet is not diverted.  I added code changes  to not to process broadcast packet by the VRF driver.. Is my assumption correct ?

static struct sk_buff *vrf_ip_out(struct net_device *vrf_dev,
struct sock *sk,
struct sk_buff *skb)
{

/* don’t divert multicast */
if (ipv4_is_multicast(ip_hdr(skb)->daddr))
return skb;

…
/* don’t divert broadcast */
if (ipv4_is_lbcast(ip_hdr(skb)->daddr)) {
return skb;

Regards,

Sukumar

________________________________

DISCLAIMER:
This e-mail and any attachments to it may contain confidential and proprietary material and is solely for the use of the intended recipient. Any review, use, disclosure, distribution or copying of this transmittal is prohibited except by or on behalf of the intended recipient. If you have received this transmittal in error, please notify the sender and destroy this e-mail and any attachments and all copies, whether electronic or printed.