• Mark Tomlinson's avatar
    net: VRF: Pass original iif to ip_route_input() · d6f64d72
    Mark Tomlinson authored
    The function ip_rcv_finish() calls l3mdev_ip_rcv(). On any VRF except
    the global VRF, this replaces skb->dev with the VRF master interface.
    When calling ip_route_input_noref() from here, the checks for forwarding
    look at this master device instead of the initial ingress interface.
    This will allow packets to be routed which normally would be dropped.
    For example, an interface that is not assigned an IP address should
    drop packets, but because the checking is against the master device, the
    packet will be forwarded.
    
    The fix here is to still call l3mdev_ip_rcv(), but remember the initial
    net_device. This is passed to the other functions within ip_rcv_finish,
    so they still see the original interface.
    Signed-off-by: default avatarMark Tomlinson <mark.tomlinson@alliedtelesis.co.nz>
    Acked-by: default avatarDavid Ahern <dsa@cumulusnetworks.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    d6f64d72
ip_input.c 14.5 KB