ipv6: drop frames with attached skb->sk in forwarding
This is a clone of commit 2ab957492d
("ip_forward: Drop frames with
attached skb->sk") for ipv6.
This commit has exactly the same reasons as the above mentioned commit,
namely to prevent panics during netfilter reload or a misconfigured stack.
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
d9e4ce65b2
commit
9ef2e965e5
|
@ -376,6 +376,9 @@ int ip6_forward(struct sk_buff *skb)
|
|||
if (skb->pkt_type != PACKET_HOST)
|
||||
goto drop;
|
||||
|
||||
if (unlikely(skb->sk))
|
||||
goto drop;
|
||||
|
||||
if (skb_warn_if_lro(skb))
|
||||
goto drop;
|
||||
|
||||
|
|
Loading…
Reference in New Issue