netfilter: reset netfilter state when duplicating packet
authorFlorian Westphal <fw@strlen.de>
Mon, 23 Jan 2017 17:21:54 +0000 (18:21 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 2 Feb 2017 13:31:51 +0000 (14:31 +0100)
commit6e10148c5c85629832d9156f337cbf67e96b69fe
treede5dcd5c24789532222702f5272299379a881cf6
parent11df4b760f11ca7528c62b1c4b870735d1c62116
netfilter: reset netfilter state when duplicating packet

We should also toss nf_bridge_info, if any -- packet is leaving via
ip_local_out, also, this skb isn't bridged -- it is a locally generated
copy.  Also this avoids the need to touch this later when skb->nfct is
replaced with 'unsigned long _nfct' in followup patch.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/nf_dup_ipv4.c
net/ipv6/netfilter/nf_dup_ipv6.c