diff options
| author | Florian Westphal | 2015-06-30 22:27:51 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2015-07-02 17:59:26 +0200 |
| commit | dd302b59bde0149c20df7278c0d36c765e66afbd (patch) | |
| tree | 94a1f2b00b55baf735ca1cb299117b6b7a611a1b /Makefile | |
| parent | netfilter: arptables: use percpu jumpstack (diff) | |
| download | kernel-qcow2-linux-dd302b59bde0149c20df7278c0d36c765e66afbd.tar.gz kernel-qcow2-linux-dd302b59bde0149c20df7278c0d36c765e66afbd.tar.xz kernel-qcow2-linux-dd302b59bde0149c20df7278c0d36c765e66afbd.zip | |
netfilter: bridge: don't leak skb in error paths
br_nf_dev_queue_xmit must free skb in its error path.
NF_DROP is misleading -- its an okfn, not a netfilter hook.
Fixes: 462fb2af9788a ("bridge : Sanitize skb before it enters the IP stack")
Fixes: efb6de9b4ba00 ("netfilter: bridge: forward IPv6 fragmented packets")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'Makefile')
0 files changed, 0 insertions, 0 deletions