diff options
| author | Eyal Soha <eyalsoha@google.com> | 2020-01-17 18:24:39 -0800 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2020-01-17 18:26:20 -0800 |
| commit | 47d85257d3d015f0b9f7739c81af0ee9f510aaf5 (patch) | |
| tree | e81113cd50046872d06104f0bd3c24ef7ee48275 /pkg/sentry/kernel/task_block.go | |
| parent | f1a5178c589dbd9a1fe4f1b9fb943fbe64791b58 (diff) | |
Filter out received packets with a local source IP address.
CERT Advisory CA-96.21 III. Solution advises that devices drop packets which
could not have correctly arrived on the wire, such as receiving a packet where
the source IP address is owned by the device that sent it.
Fixes #1507
PiperOrigin-RevId: 290378240
Diffstat (limited to 'pkg/sentry/kernel/task_block.go')
0 files changed, 0 insertions, 0 deletions