[PATCH net] ipv6: drop frames with attached skb->sk in forwarding

2015-10-08 Thread Hannes Frederic Sowa
This is a clone of commit 2ab957492d13b ("ip_forward: Drop frames with attached skb->sk") for ipv6. This commit has exactly the same reasons as the above mentioned commit, namely to prevent panics during netfilter reload or a misconfigured stack. Signed-off-by: Hannes Frederic Sowa --- net/ipv6

Re: [PATCH net]: ipv6: drop frames with attached skb->sk in forwarding

2016-03-14 Thread Francesco Ruggeri
Should 9ef2e965e554 ["ipv6: drop frames with attached skb->sk in forwarding"] be considered for stable? It did address a crash in ip6_skb_dst_mtu that I was seeing in 3.18, where an incoming packet found an inet_timewait_sock in tcp_v6_early_demux but was later ip6_forward'ed (the local address th

Re: [PATCH net]: ipv6: drop frames with attached skb->sk in forwarding

2016-03-14 Thread Eric Dumazet
On Mon, 2016-03-14 at 15:32 -0700, Francesco Ruggeri wrote: > Should 9ef2e965e554 ["ipv6: drop frames with attached skb->sk in forwarding"] > be considered for stable? > It did address a crash in ip6_skb_dst_mtu that I was seeing in 3.18, where > an incoming packet found an inet_timewait_sock in tc

Re: [PATCH net] ipv6: drop frames with attached skb->sk in forwarding

2015-10-11 Thread David Miller
From: Hannes Frederic Sowa Date: Thu, 8 Oct 2015 18:19:53 +0200 > This is a clone of commit 2ab957492d13b ("ip_forward: Drop frames with > attached skb->sk") for ipv6. > > This commit has exactly the same reasons as the above mentioned commit, > namely to prevent panics during netfilter reload