diff options
| author | Florian Westphal <fw@strlen.de> | 2015-09-14 17:06:27 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-09-14 18:08:33 +0200 |
| commit | 63cdbc06b357dcb3a7104a421ee4a4550d7fadfd (patch) | |
| tree | 2fb2ea7a51b185f2786f4ee61773b470b9a5eb7a /net/netfilter/nft_compat.c | |
| parent | 205ee117d4dc4a11ac3bd9638bb9b2e839f4de9a (diff) | |
netfilter: bridge: fix routing of bridge frames with call-iptables=1
We can't re-use the physoutdev storage area.
1. When using NFQUEUE in PREROUTING, we attempt to bump a bogus
refcnt since nf_bridge->physoutdev is garbage (ipv4/ipv6 address)
2. for same reason, we crash in physdev match in FORWARD or later if
skb is routed instead of bridged.
This increases nf_bridge_info to 40 bytes, but we have no other choice.
Fixes: 72b1e5e4cac7 ("netfilter: bridge: reduce nf_bridge_info to 32 bytes again")
Reported-by: Sander Eikelenboom <linux@eikelenboom.it>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_compat.c')
0 files changed, 0 insertions, 0 deletions