Re: [PATCH] ip6_output: ensure flow saddr actually belongs to device

From: Jason A. Donenfeld
Date: Sun Nov 13 2016 - 15:20:14 EST


Hi David,

On Sun, Nov 13, 2016 at 5:30 PM, David Ahern <dsa@xxxxxxxxxxxxxxxxxxx> wrote:
> You can't require the address to be on the dst device. e.g., it can be an address from the loopback/vrf device.
>
> This block needs to be done at function entry, and pass dev as NULL to mean is the address assigned to any interface. That gets you the equivalency of the IPv4 check.

I gave v2 my best shot. Hopefully it's adequate, but I have a feeling
it might be best for you to just code up what you have in mind.

Regards,
Jason