Attachment 315012 Details for Bug 459556 – backport of upstream commit f630e43a215a3129d0c1173cae0bce6ea4855cf7

[patch] backport of upstream commit f630e43a215a3129d0c1173cae0bce6ea4855cf7

linux-kernel-test.patch (text/plain), 1.30 KB, created by Neil Horman on 2008-08-26 16:13:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Neil Horman

Created: 2008-08-26 16:13:47 UTC

Size: 1.30 KB

patch

obsolete

>diff -up linux-2.6.18.noarch/include/net/ipv6.h.orig linux-2.6.18.noarch/include/net/ipv6.h
>--- linux-2.6.18.noarch/include/net/ipv6.h.orig	2008-08-26 10:56:26.000000000 -0400
>+++ linux-2.6.18.noarch/include/net/ipv6.h	2008-08-26 11:34:34.000000000 -0400
>@@ -383,6 +383,12 @@ static inline int ipv6_addr_any(const st
> 		 a->s6_addr32[2] | a->s6_addr32[3] ) == 0); 
> }
> 
>+static inline int ipv6_addr_loopback(const struct in6_addr *a)
>+{
>+	return ((a->s6_addr32[0] | a->s6_addr32[1] |
>+		a->s6_addr32[2] | (a->s6_addr32[3] ^ htonl(1))) == 0);
>+}
>+
> /*
>  * find the first different bit between two addresses
>  * length of address must be a multiple of 32bits
>diff -up linux-2.6.18.noarch/net/ipv6/ip6_input.c.orig linux-2.6.18.noarch/net/ipv6/ip6_input.c
>--- linux-2.6.18.noarch/net/ipv6/ip6_input.c.orig	2008-08-26 10:56:26.000000000 -0400
>+++ linux-2.6.18.noarch/net/ipv6/ip6_input.c	2008-08-26 11:38:10.000000000 -0400
>@@ -102,6 +102,15 @@ int ipv6_rcv(struct sk_buff *skb, struct
> 	if (hdr->version != 6)
> 		goto err;
> 
>+	/*
>+	 * RFC4291 2.5.3
>+	 * A packet received on an interface with a destination address
>+	 * of loopback must be dropped.
>+	 */
>+	if (!(dev->flags & IFF_LOOPBACK) &&
>+	    ipv6_addr_loopback(&hdr->daddr))
>+		goto err;
>+ 
> 	skb->h.raw = (u8 *)(hdr + 1);
> 	IP6CB(skb)->nhoff = offsetof(struct ipv6hdr, nexthdr);
>

Actions: View | Diff

Attachments on bug 459556: 315012