Patrick McHardy 8fa9ff6849
netfilter: fix crashes in bridge netfilter caused by fragment jumps ...
When fragments from bridge netfilter are passed to IPv4 or IPv6 conntrack
and a reassembly queue with the same fragment key already exists from
reassembling a similar packet received on a different device (f.i. with
multicasted fragments), the reassembled packet might continue on a different
codepath than where the head fragment originated. This can cause crashes
in bridge netfilter when a fragment received on a non-bridge device (and
thus with skb->nf_bridge == NULL) continues through the bridge netfilter
code.
Add a new reassembly identifier for packets originating from bridge
netfilter and use it to put those packets in insolated queues.
Fixes http://bugzilla.kernel.org/show_bug.cgi?id=14805
Reported-and-Tested-by: Chong Qiao <qiaochong@loongson.cn >
Signed-off-by: Patrick McHardy <kaber@trash.net >
2009-12-15 16:59:59 +01:00
2009-11-02 08:43:45 -06:00
2009-12-03 19:34:24 +01:00
2009-08-05 10:42:58 -07:00
2009-06-19 00:10:40 -07:00
2009-12-15 16:59:18 +01:00
2009-12-03 12:22:03 -08:00
2009-11-18 10:08:26 -08:00
2009-12-09 19:43:33 -08:00
2009-10-22 21:56:42 -07:00
2009-08-17 21:33:49 -07:00
2009-09-15 02:37:40 -07:00
2009-08-12 21:54:50 -07:00
2008-11-26 15:32:27 -08:00
2009-11-04 05:06:25 -08:00
2009-09-01 17:40:57 -07:00
2009-01-21 14:01:59 -08:00
2009-03-24 23:32:03 -07:00
2009-11-28 15:05:05 -05:00
2008-11-19 15:44:53 -08:00
2009-03-28 15:01:36 +11:00
2009-10-20 01:09:17 -07:00
2009-09-01 01:24:30 -07:00
2009-12-08 07:55:01 -08:00
2009-11-04 05:06:25 -08:00
2009-11-04 05:06:25 -08:00
2008-11-27 23:04:13 -08:00
2009-03-21 19:06:54 -07:00
2009-09-01 17:40:31 -07:00
2009-11-04 23:24:15 -08:00
2009-03-27 00:16:21 -07:00
2009-12-03 12:22:55 -08:00
2008-11-25 17:35:18 -08:00
2009-11-04 05:06:25 -08:00
2009-11-04 05:06:25 -08:00
2009-10-30 16:49:20 -04:00
2009-11-06 14:32:18 +03:00
2009-07-23 17:08:51 +04:00
2009-11-04 05:06:25 -08:00
2009-10-18 18:52:53 -07:00
2009-09-30 16:12:20 -07:00
2009-02-14 22:58:35 -08:00
2009-02-26 23:13:35 -08:00
2009-11-13 20:46:56 -08:00
2009-10-18 18:52:53 -07:00
2009-12-03 16:17:43 -08:00
2009-11-13 20:46:58 -08:00
2009-11-04 05:06:25 -08:00
2009-11-04 05:06:25 -08:00
2009-11-06 00:55:55 -08:00
2009-11-04 05:06:25 -08:00
2009-12-15 16:59:59 +01:00
2009-11-04 05:06:25 -08:00
2009-12-15 16:59:59 +01:00
2009-02-14 22:58:35 -08:00
2009-11-04 05:06:25 -08:00
2008-11-21 11:42:55 -05:00
2009-12-04 13:25:15 -08:00
2009-09-24 07:21:04 -07:00
2009-12-08 07:55:01 -08:00
2009-12-03 12:22:01 -08:00
2009-01-06 11:38:15 -07:00
2009-03-28 15:01:37 +11:00
2009-08-25 16:07:40 +02:00
2009-01-21 14:02:01 -08:00
2009-08-19 23:08:22 +04:00
2009-11-20 15:35:04 -08:00
2009-11-04 05:06:25 -08:00
2009-11-05 21:40:17 -08:00
2009-03-21 19:06:50 -07:00
2009-06-23 04:31:07 -07:00
2009-11-04 05:06:25 -08:00
2009-04-22 16:57:17 -04:00
2009-12-02 22:07:23 -08:00
2009-07-26 19:11:14 -07:00
2009-12-01 16:15:50 -08:00
2009-11-08 00:53:51 -08:00
2009-11-04 05:06:25 -08:00
2009-11-04 05:06:25 -08:00
2009-04-27 02:45:02 -07:00
2009-11-08 20:53:06 -08:00
2009-12-09 19:43:33 -08:00
2008-11-21 16:45:22 -08:00
2009-09-02 01:03:49 -07:00
2009-11-10 20:54:38 -08:00
2008-10-29 01:41:45 -07:00
2009-10-07 16:39:43 -04:00
2009-12-09 19:43:33 -08:00
2009-11-06 14:32:24 +03:00
2009-11-29 00:24:59 -08:00
2009-11-25 15:48:38 -08:00
8fa9ff6849