Commit b56579ef authored Oct 08, 2015 by Hannes Frederic Sowa Committed by Sasha Levin Mar 14, 2016

ipv6: drop frames with attached skb->sk in forwarding



[ Upstream commit 9ef2e965e55481a52d6d91ce61977a27836268d3 ]

This is a clone of commit 2ab957492d13b ("ip_forward: Drop frames with
attached skb->sk") for ipv6.

This commit has exactly the same reasons as the above mentioned commit,
namely to prevent panics during netfilter reload or a misconfigured stack.

Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>

parent c8140051

net/ipv6/ip6_output.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -374,6 +374,9 @@ int ip6_forward(struct sk_buff *skb)
		if (skb->pkt_type != PACKET_HOST)
		goto drop;

		if (unlikely(skb->sk))
		goto drop;

		if (skb_warn_if_lro(skb))
		goto drop;