Skip to content

ipv4: Ensure ECN bits don't influence source address validation

Guillaume Nault netdev 1 version Applied

Status from this message: This series was applied to netdev/net.git (refs/heads/master):

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 0 repliesApplied 2/2

Patches in v1 All 2 applied

#Subject and filesSizeRepliesApplied
1/2udp: mask TOS bits in udp_v4_early_demux()net/ipv4/udp.c+2 -10 repliesApplied
2/2netfilter: rpfilter: mask ecn bits before fib lookupnet/ipv4/netfilter/ipt_rpfilter.c+1 -10 repliesApplied

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH net 0/2] ipv4: Ensure ECN bits don't influence source address validation

Functions that end up calling fib_table_lookup() should clear the ECN bits from the TOS, otherwise ECT(0) and ECT(1) packets can be treated differently.

Most functions already clear the ECN bits, but there are a few cases where this is not done. This series only fixes the ones related to source address validation.

Guillaume Nault (2):
udp: mask TOS bits in udp_v4_early_demux()
netfilter: rpfilter: mask ecn bits before fib lookup

 net/ipv4/netfilter/ipt_rpfilter.c | 2 +-
 net/ipv4/udp.c                    | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)
Signature · 1 line
2.21.3

Read the cover letter in its thread