|
On 10/25/2013 11:55 AM, Simon Horman wrote:
On Fri, Oct 25, 2013 at 11:39:02AM +0200, Jesper Dangaard Brouer wrote:
On Fri, 25 Oct 2013 11:05:04 +0200
Daniel Borkmann <dborkman@xxxxxxxxxx> wrote:
If skb_header_pointer() fails, we need to assign a verdict, that is
NF_DROP in this case, otherwise, we would leave the verdict from
conn_schedule() uninitialized when returning.
Signed-off-by: Daniel Borkmann <dborkman@xxxxxxxxxx>
---
Acked-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
It looks like a good ide, and resembles how we handle these situations
else were in the IPVS code (e.g. for TCP and UDP).
Likeiwse.
I am wondering if this resolves a but and if so how severe it is.
Probably with malformed SCTP INIT packets, but haven't tried so far.
Just found it during code review.
--
To unsubscribe from this list: send the line "unsubscribe lvs-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
|
