ipv6: Do not forward packets with the unspecified source address.
authorYOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Wed, 25 Jun 2008 07:55:26 +0000 (16:55 +0900)
committerYOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Thu, 3 Jul 2008 08:51:55 +0000 (17:51 +0900)
RFC4291 2.5.2.

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
net/ipv6/ip6_output.c

index fd7cd1bfe1510e4e71fcd000b02087a8c4280d97..871bdec09edbc39b952c5102cabbfbf5229253f6 100644 (file)
@@ -498,7 +498,8 @@ int ip6_forward(struct sk_buff *skb)
                int addrtype = ipv6_addr_type(&hdr->saddr);
 
                /* This check is security critical. */
-               if (addrtype & (IPV6_ADDR_MULTICAST|IPV6_ADDR_LOOPBACK))
+               if (addrtype == IPV6_ADDR_ANY ||
+                   addrtype & (IPV6_ADDR_MULTICAST | IPV6_ADDR_LOOPBACK))
                        goto error;
                if (addrtype & IPV6_ADDR_LINKLOCAL) {
                        icmpv6_send(skb, ICMPV6_DEST_UNREACH,