Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
@@ -1301,8 +1301,17 @@ int igmp6_event_query(struct sk_buff *skb)
|
||||
len = ntohs(ipv6_hdr(skb)->payload_len) + sizeof(struct ipv6hdr);
|
||||
len -= skb_network_header_len(skb);
|
||||
|
||||
/* Drop queries with not link local source */
|
||||
if (!(ipv6_addr_type(&ipv6_hdr(skb)->saddr) & IPV6_ADDR_LINKLOCAL))
|
||||
/* RFC3810 6.2
|
||||
* Upon reception of an MLD message that contains a Query, the node
|
||||
* checks if the source address of the message is a valid link-local
|
||||
* address, if the Hop Limit is set to 1, and if the Router Alert
|
||||
* option is present in the Hop-By-Hop Options header of the IPv6
|
||||
* packet. If any of these checks fails, the packet is dropped.
|
||||
*/
|
||||
if (!(ipv6_addr_type(&ipv6_hdr(skb)->saddr) & IPV6_ADDR_LINKLOCAL) ||
|
||||
ipv6_hdr(skb)->hop_limit != 1 ||
|
||||
!(IP6CB(skb)->flags & IP6SKB_ROUTERALERT) ||
|
||||
IP6CB(skb)->ra != htons(IPV6_OPT_ROUTERALERT_MLD))
|
||||
return -EINVAL;
|
||||
|
||||
idev = __in6_dev_get(skb->dev);
|
||||
|
@@ -673,8 +673,11 @@ int udpv6_queue_rcv_skb(struct sock *sk, struct sk_buff *skb)
|
||||
goto csum_error;
|
||||
}
|
||||
|
||||
if (sk_rcvqueues_full(sk, skb, sk->sk_rcvbuf))
|
||||
if (sk_rcvqueues_full(sk, skb, sk->sk_rcvbuf)) {
|
||||
UDP6_INC_STATS_BH(sock_net(sk),
|
||||
UDP_MIB_RCVBUFERRORS, is_udplite);
|
||||
goto drop;
|
||||
}
|
||||
|
||||
skb_dst_drop(skb);
|
||||
|
||||
@@ -689,6 +692,7 @@ int udpv6_queue_rcv_skb(struct sock *sk, struct sk_buff *skb)
|
||||
bh_unlock_sock(sk);
|
||||
|
||||
return rc;
|
||||
|
||||
csum_error:
|
||||
UDP6_INC_STATS_BH(sock_net(sk), UDP_MIB_CSUMERRORS, is_udplite);
|
||||
drop:
|
||||
|
Reference in New Issue
Block a user