Skip to main content

Browse the archive

https://github.com/torvalds/linux
23 October 2021, 00:29:24 UTC
Revision 48d5cad87c3a4998d0bda16ccfb5c60dfe4de5fb authored by Patrick McHardy on 15 February 2006, 23:10:22 UTC, committed by David S. Miller on 15 February 2006, 23:10:22 UTC 
[XFRM]: Fix SNAT-related crash in xfrm4_output_finish
 
When a packet matching an IPsec policy is SNATed so it doesn't match any
policy anymore it looses its xfrm bundle, which makes xfrm4_output_finish
crash because of a NULL pointer dereference.

This patch directs these packets to the original output path instead. Since
the packets have already passed the POST_ROUTING hook, but need to start at
the beginning of the original output path which includes another
POST_ROUTING invocation, a flag is added to the IPCB to indicate that the
packet was rerouted and doesn't need to pass the POST_ROUTING hook again.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 5ecfbae
History
Tip revision: 48d5cad87c3a4998d0bda16ccfb5c60dfe4de5fb authored by Patrick McHardy on 15 February 2006, 23:10:22 UTC
[XFRM]: Fix SNAT-related crash in xfrm4_output_finish
Tip revision: 48d5cad
File Mode Size
Kconfig -rw-r--r-- 18.3 KB
Makefile -rw-r--r-- 921 bytes
calibrate.c -rw-r--r-- 4.7 KB
do_mounts.c -rw-r--r-- 9.0 KB
do_mounts.h -rw-r--r-- 1.7 KB
do_mounts_devfs.c -rw-r--r-- 2.8 KB
do_mounts_initrd.c -rw-r--r-- 3.0 KB
do_mounts_md.c -rw-r--r-- 7.5 KB
do_mounts_rd.c -rw-r--r-- 10.0 KB
initramfs.c -rw-r--r-- 10.7 KB
main.c -rw-r--r-- 17.0 KB
version.c -rw-r--r-- 748 bytes
back to top