projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e6d57e9) | patch
netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
authorPhil Sutter <phil@nwl.cc>
Thu, 16 Feb 2023 16:05:36 +0000 (17:05 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 21 Feb 2023 23:22:20 +0000 (00:22 +0100)
commitefb056e5f1f0036179b2f92c1c15f5ea7a891d70
tree07f0bc8ec591633fabf795cfb4990f994c52e03ctree | snapshot
parente6d57e9ff0aec323717ee36fc9ea34ad89217151commit | diff
netfilter: ip6t_rpfilter: Fix regression with VRF interfaces

When calling ip6_route_lookup() for the packet arriving on the VRF
interface, the result is always the real (slave) interface. Expect this
when validating the result.

Fixes: acc641ab95b66 ("netfilter: rpfilter/fib: Populate flowic_l3mdev field")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv6/netfilter/ip6t_rpfilter.c diff | blob | history
tools/testing/selftests/netfilter/rpath.sh diff | blob | history
Domain: System / Kernel;