Re: [PATCH net-next-2.6] bridge : Sanitize skb before it entersthe IP stack

From: David Miller
Date: Sun Sep 19 2010 - 16:23:58 EST


From: Bandan Das <bandan.das@xxxxxxxxxxx>
Date: Sun, 19 Sep 2010 15:34:33 -0400

> Related dicussion here : http://lkml.org/lkml/2010/9/3/16
>
> Introduce a function br_parse_ip_options that will audit the
> skb and possibly refill IP options before a packet enters the
> IP stack. If no options are present, the function will zero out
> the skb cb area so that it is not misinterpreted as options by some
> unsuspecting IP layer routine. If packet consistency fails, drop it.
>
> Signed-off-by: Bandan Das <bandan.das@xxxxxxxxxxx>

Applied, thanks a lot!
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/