diff options
| author |   Herbert Xu <herbert@gondor.apana.org.au> | 2014-10-04 22:18:02 +0800 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2014-10-24 14:24:03 +0200 |
| commit | 7677e86843e2136a9b05549a9ca47d4f744565b6 (patch) | |
| tree | e7b3937d6d81c2af30ad2d3c56724a0c30aa8b40 /fs/efivarfs | |
| parent | netfilter: nf_tables: check for NULL in nf_tables_newchain pcpu stats allocation (diff) | |
| download | linux-dev-7677e86843e2136a9b05549a9ca47d4f744565b6.tar.xz linux-dev-7677e86843e2136a9b05549a9ca47d4f744565b6.zip | |
bridge: Do not compile options in br_parse_ip_options
Commit 462fb2af9788a82a534f8184abfde31574e1cfa0
bridge : Sanitize skb before it enters the IP stack
broke when IP options are actually used because it mangles the
skb as if it entered the IP stack which is wrong because the
bridge is supposed to operate below the IP stack.
Since nobody has actually requested for parsing of IP options
this patch fixes it by simply reverting to the previous approach
of ignoring all IP options, i.e., zeroing the IPCB.
If and when somebody who uses IP options and actually needs them
to be parsed by the bridge complains then we can revisit this.
Reported-by: David Newall <davidn@davidnewall.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Tested-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'fs/efivarfs')
0 files changed, 0 insertions, 0 deletions