lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 26 Apr 2007 18:57:06 -0400 From: Chuck Ebbert <cebbert@...hat.com> To: David Miller <davem@...emloft.net> CC: yoshfuji@...ux-ipv6.org, netdev@...r.kernel.org, Sergey Vlasov <vsu@...linux.ru> Subject: Re: IPV6 source routing patch is still broken? David Miller wrote: >> + case IPV6_SRCRT_TYPE_2: >> + if (accept_source_route >= 0) >> + break; >> + kfree_skb(skb); >> + return -1; >> + case IPV6_SRCRT_TYPE_0: >> + if (accept_source_route > 0) >> + break; >> + kfree_skb(skb); >> + return -1; > > Yes, that looks like it matches the sysctl documentation more closely: > > accept_source_route - INTEGER > Accept source routing (routing extension header). > > > 0: Accept routing header. > = 0: Accept only routing header type 2. > < 0: Do not accept routing header. > > Type 2 packets should get through as long as the value of the sysctl > is not negative. It was Sergey Vlasov who first found this. I had tried to find his original message but I was searching the wrong place. Sergey, you should send networking-related messages to netdev. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists