]> git.proxmox.com Git - mirror_ubuntu-eoan-kernel.git/commit
route: fix ICMP redirect validation
authorFlavio Leitner <fbl@redhat.com>
Mon, 24 Oct 2011 06:56:38 +0000 (02:56 -0400)
committerDavid S. Miller <davem@davemloft.net>
Mon, 24 Oct 2011 06:56:38 +0000 (02:56 -0400)
commit7cc9150ebe8ec06cafea9f1c10d92ddacf88d8ae
tree0820f1a9de3a2b1a81913550056518c21950e7f8
parentda92b194cc36b5dc1fbd85206aeeffd80bee0c39
route: fix ICMP redirect validation

The commit f39925dbde7788cfb96419c0f092b086aa325c0f
(ipv4: Cache learned redirect information in inetpeer.)
removed some ICMP packet validations which are required by
RFC 1122, section 3.2.2.2:
...
  A Redirect message SHOULD be silently discarded if the new
  gateway address it specifies is not on the same connected
  (sub-) net through which the Redirect arrived [INTRO:2,
  Appendix A], or if the source of the Redirect is not the
  current first-hop gateway for the specified destination (see
  Section 3.3.1).

Signed-off-by: Flavio Leitner <fbl@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/route.c