Commit 14221cc4 authored Dec 30, 2016 by Artur Molchanov Committed by Pablo Neira Ayuso Dec 30, 2016

bridge: netfilter: Fix dropping packets that moving through bridge interface



Problem:
br_nf_pre_routing_finish() calls itself instead of
br_nf_pre_routing_finish_bridge(). Due to this bug reverse path filter drops
packets that go through bridge interface.

User impact:
Local docker containers with bridge network can not communicate with each
other.

Fixes: c5136b15 ("netfilter: bridge: add and use br_nf_hook_thresh")
Signed-off-by: Artur Molchanov <artur.molchanov@synesis.ru>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent 6c5d5cfb

net/bridge/br_netfilter_hooks.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -399,7 +399,7 @@ static int br_nf_pre_routing_finish(struct net net, struct sock sk, struct sk_
		br_nf_hook_thresh(NF_BR_PRE_ROUTING,
		net, sk, skb, skb->dev,
		NULL,
		br_nf_pre_routing_finish);
		br_nf_pre_routing_finish_bridge);
		return 0;
		}
		ether_addr_copy(eth_hdr(skb)->h_dest, dev->dev_addr);