]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 97b6653) | patch
netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag
authorwenxu <wenxu@chinatelecom.cn>
Thu, 26 May 2022 01:25:45 +0000 (21:25 -0400)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 31 May 2022 21:14:03 +0000 (23:14 +0200)
commit078031cce6064edd568babd77a0181570e772001
treed5626e76f7667d1dc0f8ef308bb7163124a5a232tree | snapshot
parent97b6653a390f1905e918457ab1d8295e6e66a8b6commit | diff
netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag

The nf_flow_table gets route through ip_route_output_key. If the saddr
is not local one, then FLOWI_FLAG_ANYSRC flag should be set. Without
this flag, the route lookup for other_dst will fail.

Fixes: d7b4cb63ee79 (netfilter: flowtable: nft_flow_route use more data for reverse route)
Signed-off-by: wenxu <wenxu@chinatelecom.cn>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_flow_offload.c diff | blob | history
Linux Kernel Source Tree.