Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

ipvs: fix ipv6 route unreach panic

Previously there was a trivial panic

unshare -n /bin/bash <<EOF
ip addr add dev lo face::1/128
ipvsadm -A -t [face::1]:15213
ipvsadm -a -t [face::1]:15213 -r b00c::1
echo boom | nc face::1 15213
EOF

This patch allows us to replicate the net logic above and simply capture
the skb_dst(skb)->dev and use that for the purpose of the invocation.

Signed-off-by: Alex Gartrell <agartrell@fb.com>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>

authored by

Alex Gartrell and committed by
Simon Horman
326bf17e 484836ec

+7
+7
net/netfilter/ipvs/ip_vs_xmit.c
··· 505 505 return -1; 506 506 507 507 err_unreach: 508 + /* The ip6_link_failure function requires the dev field to be set 509 + * in order to get the net (further for the sake of fwmark 510 + * reflection). 511 + */ 512 + if (!skb->dev) 513 + skb->dev = skb_dst(skb)->dev; 514 + 508 515 dst_link_failure(skb); 509 516 return -1; 510 517 }