diff options
| author |   Florian Westphal <fw@strlen.de> | 2015-05-03 22:05:28 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2015-05-14 12:43:48 +0200 |
| commit | 7fb48c5bc3100f7674a8e26f42c1518196500728 (patch) | |
| tree | 92bf44e222b6c7e8c604366fd35823d5872ca2a6 /net | |
| parent | netfilter: ipset: Use better include files in xt_set.c (diff) | |
| download | linux-dev-7fb48c5bc3100f7674a8e26f42c1518196500728.tar.xz linux-dev-7fb48c5bc3100f7674a8e26f42c1518196500728.zip | |
netfilter: bridge: neigh_head and physoutdev can't be used at same time
The neigh_header is only needed when we detect DNAT after prerouting
and neigh cache didn't have a mac address for us.
The output port has not been chosen yet so we can re-use the storage
area, bringing struct size down to 32 bytes on x86_64.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
| -rw-r--r-- | net/bridge/br_netfilter.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/bridge/br_netfilter.c b/net/bridge/br_netfilter.c index ab55e2472beb..13973da29b2a 100644 --- a/net/bridge/br_netfilter.c +++ b/net/bridge/br_netfilter.c @@ -973,6 +973,8 @@ static void br_nf_pre_routing_finish_bridge_slow(struct sk_buff *skb) nf_bridge->neigh_header, ETH_HLEN - ETH_ALEN); skb->dev = nf_bridge->physindev; + + nf_bridge->physoutdev = NULL; br_handle_frame_finish(NULL, skb); } |