OpenVZ Forum


Home » Mailing lists » Devel » [PATCH] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish()
Re: [PATCH] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish() [message #43950 is a reply to message #43949] Wed, 02 November 2011 19:11 Go to previous messageGo to previous message
Vasily Averin is currently offline  Vasily Averin
Messages: 17
Registered: April 2008
Junior Member
On 11/02/2011 11:08 PM, Vasily Averin wrote:
> if dst is not local br_handle_frame_finish() does not clone original skb and
> forgets to reset IPCB before return to IP stack. it can lead to stack corruption
> in icmp_send()

example of stack corruption
http://bugzilla.openvz.org/show_bug.cgi?id=2016

> Signed-off-by: Vasily Averin <vvs@sw.ru>
> ---
> net/bridge/br_input.c | 5 +++--
> 1 files changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/net/bridge/br_input.c b/net/bridge/br_input.c
> index f06ee39..6be8d00 100644
> --- a/net/bridge/br_input.c
> +++ b/net/bridge/br_input.c
> @@ -93,10 +93,11 @@ int br_handle_frame_finish(struct sk_buff *skb)
> skb2 = skb;
>
> br->dev->stats.multicast++;
> - } else if ((dst = __br_fdb_get(br, dest)) && dst->is_local) {
> + } else if ((dst = __br_fdb_get(br, dest)) != NULL) {
> skb2 = skb;
> /* Do not forward the packet since it's local. */
> - skb = NULL;
> + if (dst->is_local) {
> + skb = NULL;
> }
>
> if (skb) {
> -- 1.7.5.4
 
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: [PATCH v2] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish()
Next Topic: Re: [Bridge] [PATCH] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish()
Goto Forum:
  


Current Time: Thu Oct 09 17:31:58 GMT 2025

Total time taken to generate the page: 0.07198 seconds