diff options
| author |   Patrick McHardy <kaber@trash.net> | 2008-04-14 00:46:01 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2008-04-14 00:46:01 -0700 |
| commit | 159d83363b629c91d020734207c1bc788b96af5a (patch) | |
| tree | 9e2bd418f94bed1dc0f62eb6a1f7671055c473b9 /net/netfilter | |
| parent | [NETFILTER]: ipt_CLUSTERIP: fix race between clusterip_config_find_get and _entry_put (diff) | |
| download | linux-dev-159d83363b629c91d020734207c1bc788b96af5a.tar.xz linux-dev-159d83363b629c91d020734207c1bc788b96af5a.zip | |
[BRIDGE]: Fix crash in __ip_route_output_key with bridge netfilter
The bridge netfilter code attaches a fake dst_entry with a pointer to a
fake net_device structure to skbs it passes up to IPv4 netfilter. This
leads to crashes when the skb is passed to __ip_route_output_key when
dereferencing the namespace pointer.
Since bridging can currently only operate in the init_net namespace,
the easiest fix for now is to initialize the nd_net pointer of the
fake net_device struct to &init_net.
Should fix bugzilla 10323: http://bugzilla.kernel.org/show_bug.cgi?id=10323
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter')
0 files changed, 0 insertions, 0 deletions