lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 17 Feb 2016 19:52:30 -0800 From: Mahesh Bandewar <mahesh@...dewar.net> To: David Miller <davem@...emloft.net> Cc: Mahesh Bandewar <maheshb@...gle.com>, Eric Dumazet <edumazet@...gle.com>, netdev <netdev@...r.kernel.org> Subject: [PATCH next v3 1/3] ipvlan: scrub skb before routing in L3 mode. From: Mahesh Bandewar <maheshb@...gle.com> Scrub skb before hitting the iptable hooks to ensure packets hit these hooks in master's namespace. Signed-off-by: Mahesh Bandewar <maheshb@...gle.com> --- drivers/net/ipvlan/ipvlan_core.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/net/ipvlan/ipvlan_core.c b/drivers/net/ipvlan/ipvlan_core.c index 8c48bb2a94ea..a1f87ec316cf 100644 --- a/drivers/net/ipvlan/ipvlan_core.c +++ b/drivers/net/ipvlan/ipvlan_core.c @@ -365,7 +365,7 @@ static int ipvlan_process_v4_outbound(struct sk_buff *skb) ip_rt_put(rt); goto err; } - skb_dst_drop(skb); + skb_scrub_packet(skb, true); skb_dst_set(skb, &rt->dst); err = ip_local_out(net, skb->sk, skb); if (unlikely(net_xmit_eval(err))) @@ -403,7 +403,7 @@ static int ipvlan_process_v6_outbound(struct sk_buff *skb) dst_release(dst); goto err; } - skb_dst_drop(skb); + skb_scrub_packet(skb, true); skb_dst_set(skb, dst); err = ip6_local_out(net, skb->sk, skb); if (unlikely(net_xmit_eval(err))) -- 2.7.0.rc3.207.g0ac5344
Powered by blists - more mailing lists