bridge: Clear IPCB before possible entry into IP stack
authorHerbert Xu <herbert@gondor.apana.org.au>
Mon, 5 Jul 2010 21:29:28 +0000 (21:29 +0000)
committerGreg Kroah-Hartman <gregkh@suse.de>
Mon, 27 Sep 2010 00:21:19 +0000 (17:21 -0700)
commitaa018b2a1b0bfb81517380aa651cf8271e4c7451
tree3973cec86294c38673bb7561167f80275a41195f
parentf535c2e115f90cf18408d91f11f7c5585bc38ef0
bridge: Clear IPCB before possible entry into IP stack

[ Upstream commit 17762060c25590bfddd68cc1131f28ec720f405f ]

The bridge protocol lives dangerously by having incestuous relations
with the IP stack.  In this instance an abomination has been created
where a bogus IPCB area from a bridged packet leads to a crash in
the IP stack because it's interpreted as IP options.

This patch papers over the problem by clearing the IPCB area in that
particular spot.  To fix this properly we'd also need to parse any
IP options if present but I'm way too lazy for that.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
net/bridge/br_netfilter.c