projects
/
platform
/
kernel
/
linux-stable.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
d68b827
)
ipv6: Do not forward packets with the unspecified source address.
author
YOSHIFUJI Hideaki
<yoshfuji@linux-ipv6.org>
Wed, 25 Jun 2008 07:55:26 +0000
(16:55 +0900)
committer
YOSHIFUJI Hideaki
<yoshfuji@linux-ipv6.org>
Thu, 3 Jul 2008 08:51:55 +0000
(17:51 +0900)
RFC4291 2.5.2.
Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
net/ipv6/ip6_output.c
patch
|
blob
|
history
diff --git
a/net/ipv6/ip6_output.c
b/net/ipv6/ip6_output.c
index
fd7cd1b
..
871bdec
100644
(file)
--- a/
net/ipv6/ip6_output.c
+++ b/
net/ipv6/ip6_output.c
@@
-498,7
+498,8
@@
int ip6_forward(struct sk_buff *skb)
int addrtype = ipv6_addr_type(&hdr->saddr);
/* This check is security critical. */
- if (addrtype & (IPV6_ADDR_MULTICAST|IPV6_ADDR_LOOPBACK))
+ if (addrtype == IPV6_ADDR_ANY ||
+ addrtype & (IPV6_ADDR_MULTICAST | IPV6_ADDR_LOOPBACK))
goto error;
if (addrtype & IPV6_ADDR_LINKLOCAL) {
icmpv6_send(skb, ICMPV6_DEST_UNREACH,