projects / GitHub / moto-9609 / android_kernel_motorola_exynos9610.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3bd2299) | patch
netfilter: bridge: don't leak skb in error paths
authorFlorian Westphal <fw@strlen.de>
Tue, 30 Jun 2015 20:27:51 +0000 (22:27 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 2 Jul 2015 15:59:26 +0000 (17:59 +0200)
commitdd302b59bde0149c20df7278c0d36c765e66afbd
tree94a1f2b00b55baf735ca1cb299117b6b7a611a1btree | snapshot (tar.gz zip)
parent3bd229976f64bea64c60803f9fc8d9f0059ba2f2commit | diff
netfilter: bridge: don't leak skb in error paths

br_nf_dev_queue_xmit must free skb in its error path.
NF_DROP is misleading -- its an okfn, not a netfilter hook.

Fixes: 462fb2af9788a ("bridge : Sanitize skb before it enters the IP stack")
Fixes: efb6de9b4ba00 ("netfilter: bridge: forward IPv6 fragmented packets")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/br_netfilter_hooks.c diff | blob | blame | history