| commit | f17199d80d11c26da96b1de81c8f7806ed7304f6 | |
| author | Florian Westphal <fw@strlen.de> | |
| Tue, 30 Jun 2015 20:27:51 +0000 (30 22:27 +0200) | ||
| committer | Ben Hutchings <ben@decadent.org.uk> | |
| Wed, 12 Aug 2015 14:33:19 +0000 (12 16:33 +0200) | ||
| tree | 2573972742999b721c0d8aca959c6efcc59fa180 | treesnapshot (tar.gz zip) |
| parent | d612a04deae8a70636a2fced4fdd0bb94dfb6219 | commitdiff |
netfilter: bridge: don't leak skb in error paths
commit dd302b59bde0149c20df7278c0d36c765e66afbd upstream.
br_nf_dev_queue_xmit must free skb in its error path.
NF_DROP is misleading -- its an okfn, not a netfilter hook.
Fixes: 462fb2af9788a ("bridge : Sanitize skb before it enters the IP stack")
Fixes: efb6de9b4ba00 ("netfilter: bridge: forward IPv6 fragmented packets")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
[bwh: Backported to 3.2:
- Adjust filename
- Drop IPv6 changes]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
commit dd302b59bde0149c20df7278c0d36c765e66afbd upstream.
br_nf_dev_queue_xmit must free skb in its error path.
NF_DROP is misleading -- its an okfn, not a netfilter hook.
Fixes: 462fb2af9788a ("bridge : Sanitize skb before it enters the IP stack")
Fixes: efb6de9b4ba00 ("netfilter: bridge: forward IPv6 fragmented packets")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
[bwh: Backported to 3.2:
- Adjust filename
- Drop IPv6 changes]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
| net/bridge/br_netfilter.c | diffblobblamehistory |