OpenVZ Forum


Home » Mailing lists » Devel » [PATCH] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish()
Re: [PATCH] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish() [message #43955 is a reply to message #43953] Wed, 02 November 2011 20:03 Go to previous messageGo to previous message
Vasily Averin is currently offline  Vasily Averin
Messages: 17
Registered: April 2008
Junior Member
On 11/02/2011 11:31 PM, Stephen Hemminger wrote:
> On Wed, 02 Nov 2011 23:08:57 +0400
> Vasily Averin <vvs@parallels.com> wrote:
>
>> if dst is not local br_handle_frame_finish() does not clone original skb and
>> forgets to reset IPCB before return to IP stack. it can lead to stack corruption
>> in icmp_send()

> What kernel version are you using? There were several previous fixes
> in br_netfilter to deal with this type of issue over the last year.

Originally it was noticed on RHEL6-based kernel

You are right, in mainline this issue was fixed in br_nf_forward_ip() long time ago.

thank you,
Vasily Averin

Report message to a moderator

[Message index]
 
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: [PATCH v2] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish()
Next Topic: Re: [Bridge] [PATCH] bridge: Reset IPCB on forward non-local packets in br_handle_frame_finish()
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ] [ PDF ]

Current Time: Wed May 27 09:48:34 GMT 2026

Total time taken to generate the page: 0.25750 seconds
Powered by FUDforum Powered by Virtuozzo Containers