Commit 2715bcf9 authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller
Browse files

[NETFILTER]: Drop conntrack reference in ip_call_ra_chain()/ip_mr_input() 



Drop reference before handing the packets to raw_rcv()

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 6150bacf

net/ipv4/ip_input.c

+1 −0
Original line number Diff line number Diff line
@@ -184,6 +184,7 @@ int ip_call_ra_chain(struct sk_buff *skb) 
					raw_rcv(last, skb2);

			}

			last = sk;

			nf_reset(skb);

		}

	}

net/ipv4/ipmr.c

+1 −0
Original line number Diff line number Diff line
@@ -1350,6 +1350,7 @@ int ip_mr_input(struct sk_buff *skb) 
			     */

			    read_lock(&mrt_lock);

			    if (mroute_socket) {

				    nf_reset(skb);

				    raw_rcv(mroute_socket, skb);

				    read_unlock(&mrt_lock);

				    return 0;