You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Patrick McHardy 2dc2f207fb [NETFILTER]: bridge-netfilter: fix net_device refcnt leaks ... When packets are flood-forwarded to multiple output devices, the bridge-netfilter code reuses skb->nf_bridge for each clone to store the bridge port. When queueing packets using NFQUEUE netfilter takes a reference to skb->nf_bridge->physoutdev, which is overwritten when the packet is forwarded to the second port. This causes refcount unterflows for the first device and refcount leaks for all others. Additionally this provides incorrect data to the iptables physdev match. Unshare skb->nf_bridge by copying it if it is shared before assigning the physoutdev device. Reported, tested and based on initial patch by Jan Christoph Nordholz <hesso@pool.math.tu-berlin.de>. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>		17 years ago
..
netfilter	[BRIDGE]: Properly dereference the br_should_route_hook	17 years ago
Kconfig	…
Makefile	…
br.c	[BRIDGE]: Lost call to br_fdb_fini() in br_init() error path	17 years ago
br_device.c	[BRIDGE]: Assign random address.	17 years ago
br_fdb.c	[BRIDGE]: Section fix.	17 years ago
br_forward.c	…
br_if.c	[NET]: Make the device list and device lookups per namespace.	18 years ago
br_input.c	[BRIDGE]: Properly dereference the br_should_route_hook	17 years ago
br_ioctl.c	[NET]: Make the device list and device lookups per namespace.	18 years ago
br_netfilter.c	[NETFILTER]: bridge-netfilter: fix net_device refcnt leaks	17 years ago
br_netlink.c	[NET]: Make the device list and device lookups per namespace.	18 years ago
br_notify.c	…
br_private.h	[NET]: Make the device list and device lookups per namespace.	18 years ago
br_private_stp.h	…
br_stp.c	…
br_stp_bpdu.c	…
br_stp_if.c	…
br_stp_timer.c	…
br_sysfs_br.c	kobjects: fix up improper use of the kobject name field	18 years ago
br_sysfs_if.c	…