On Thu, 2017-01-26 at 17:24 +0100, Florian Westphal wrote: > I think it makes sense to set dst->incoming > to a stub in br_netfilter_rtable_init() to just kfree_skb()+ > WARN_ON_ONCE(), no need to add code to ip stack or crash kernel > due to brnf bug.
Just kfree_skb() would hide bugs. Dropping packets is not uncommon in networking... I would rather use at least a WARN_ON_ONCE() before the kfree_skb() ;)
