[NETFILTER]: Drop conntrack reference in ip_call_ra_chain()/ip_mr_input()
Drop reference before handing the packets to raw_rcv() Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
6150bacfec
commit
2715bcf9ef
|
@ -184,6 +184,7 @@ int ip_call_ra_chain(struct sk_buff *skb)
|
|||
raw_rcv(last, skb2);
|
||||
}
|
||||
last = sk;
|
||||
nf_reset(skb);
|
||||
}
|
||||
}
|
||||
|
||||
|
|
|
@ -1350,6 +1350,7 @@ int ip_mr_input(struct sk_buff *skb)
|
|||
*/
|
||||
read_lock(&mrt_lock);
|
||||
if (mroute_socket) {
|
||||
nf_reset(skb);
|
||||
raw_rcv(mroute_socket, skb);
|
||||
read_unlock(&mrt_lock);
|
||||
return 0;
|
||||
|
|
Loading…
Reference in New Issue