diff options
author | Jason A. Donenfeld <Jason@zx2c4.com> | 2020-10-28 21:11:21 +0100 |
---|---|---|
committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2020-10-29 13:21:14 +0100 |
commit | 99e954f4871d9a760451c5ada99dfaae5df256e5 (patch) | |
tree | 5ff5c5a3ef63fa8fe7584f0e3228682a4e8c68f3 /src/peer.h | |
parent | 25320ac50e6ddd8b935282f22dfddb579d528429 (diff) |
netns: check that route_me_harder packets use the right sk
If netfilter changes the packet mark, the packet is rerouted. The
ip_route_me_harder family of functions fails to use the right sk, opting
to instead use skb->sk, resulting in a routing loop when used with
tunnels. Fixing this inside of the compat layer with skb_orphan would
work but would cause other problems, by disabling TSQ, so instead we
warn if the calling kernel hasn't yet backported the fix for this.
Reported-by: Chen Minqiang <ptpt52@gmail.com>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Diffstat (limited to 'src/peer.h')
0 files changed, 0 insertions, 0 deletions