diff options
| author |   Patrick McHardy <kaber@trash.net> | 2008-04-12 18:35:41 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2008-04-12 18:35:41 -0700 |
| commit | 028b027524b162eef90839a92ba4b8bddf23e06c (patch) | |
| tree | 5c128717f73ff6fb93c361cfae6961267ed52082 /net/dccp/output.c | |
| parent | [AX25]: Potential ax25_uid_assoc-s leaks on module unload. (diff) | |
| download | linux-dev-028b027524b162eef90839a92ba4b8bddf23e06c.tar.xz linux-dev-028b027524b162eef90839a92ba4b8bddf23e06c.zip | |
[DCCP]: Fix skb->cb conflicts with IP
dev_queue_xmit() and the other IP output functions expect to get a skb
with clear or properly initialized skb->cb. Unlike TCP and UDP, the
dccp_skb_cb doesn't contain a struct inet_skb_parm at the beginning,
so the DCCP-specific data is interpreted by the IP output functions.
This can cause false negatives for the conditional POST_ROUTING hook
invocation, making the packet bypass the hook.
Add a inet_skb_parm/inet6_skb_parm union to the beginning of
dccp_skb_cb to avoid clashes. Also add a BUILD_BUG_ON to make
sure it fits in the cb.
[ Combined with patch from Gerrit Renker to remove two now unnecessary
memsets of IPCB(skb)->opt ]
Signed-off-by: Patrick McHardy <kaber@trash.net>
Acked-by: Arnaldo Carvalho de Melo <acme@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/dccp/output.c')
| -rw-r--r-- | net/dccp/output.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/net/dccp/output.c b/net/dccp/output.c index 3b763db3d863..3d7d628d870d 100644 --- a/net/dccp/output.c +++ b/net/dccp/output.c @@ -126,7 +126,6 @@ static int dccp_transmit_skb(struct sock *sk, struct sk_buff *skb) DCCP_INC_STATS(DCCP_MIB_OUTSEGS); - memset(&(IPCB(skb)->opt), 0, sizeof(IPCB(skb)->opt)); err = icsk->icsk_af_ops->queue_xmit(skb, 0); return net_xmit_eval(err); } |