xfrm: force a dst reference in __xfrm_route_forward()
authorEric Dumazet <eric.dumazet@gmail.com>
Tue, 1 Jun 2010 10:04:49 +0000 (10:04 +0000)
committerDavid S. Miller <davem@davemloft.net>
Wed, 2 Jun 2010 09:26:39 +0000 (02:26 -0700)
Packets going through __xfrm_route_forward() have a not refcounted dst
entry, since we enabled a noref forwarding path.

xfrm_lookup() might incorrectly release this dst entry.

It's a bit late to make invasive changes in xfrm_lookup(), so lets force
a refcount in this path.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/xfrm/xfrm_policy.c

index d965a2bad8d3b9cf993f72eaa372fb791642f3bc..4bf27d90133336a1f862e6c7b28e4939397284c5 100644 (file)
@@ -2153,6 +2153,7 @@ int __xfrm_route_forward(struct sk_buff *skb, unsigned short family)
                return 0;
        }
 
+       skb_dst_force(skb);
        dst = skb_dst(skb);
 
        res = xfrm_lookup(net, &dst, &fl, NULL, 0) == 0;