net: ensure unbound stream socket to be chosen when not in a VRF
The commit a04a480d43
("net: Require exact match for TCP socket
lookups if dif is l3mdev") only ensures that the correct socket is
selected for packets in a VRF. However, there is no guarantee that
the unbound socket will be selected for packets when not in a VRF.
By checking for a device match in compute_score() also for the case
when there is no bound device and attaching a score to this, the
unbound socket is selected. And if a failure is returned when there
is no device match, this ensures that bound sockets are never selected,
even if there is no unbound socket.
Signed-off-by: Mike Manning <mmanning@vyatta.att-mail.com>
Reviewed-by: David Ahern <dsahern@gmail.com>
Tested-by: David Ahern <dsahern@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:

committed by
David S. Miller

parent
3c82a21f43
commit
e78190581a
@@ -143,6 +143,14 @@ static inline int inet_sk_bound_l3mdev(const struct sock *sk)
|
||||
return 0;
|
||||
}
|
||||
|
||||
static inline bool inet_bound_dev_eq(bool l3mdev_accept, int bound_dev_if,
|
||||
int dif, int sdif)
|
||||
{
|
||||
if (!bound_dev_if)
|
||||
return !sdif || l3mdev_accept;
|
||||
return bound_dev_if == dif || bound_dev_if == sdif;
|
||||
}
|
||||
|
||||
struct inet_cork {
|
||||
unsigned int flags;
|
||||
__be32 addr;
|
||||
|
Reference in New Issue
Block a user