]> git.baikalelectronics.ru Git - kernel.git/commit
ipvs: rerouting to local clients is not needed anymore
authorJulian Anastasov <ja@ssi.bg>
Thu, 18 Dec 2014 20:41:23 +0000 (22:41 +0200)
committerSimon Horman <horms@verge.net.au>
Fri, 30 Jan 2015 01:05:55 +0000 (10:05 +0900)
commit58fc6cafc9e9b5b54b251272e50f132e0903cc5e
tree3a69bdedddb9884817999d270cb1d017b080f47a
parentfb5ebde4208917297867b311e1df0b6688e8b7a5
ipvs: rerouting to local clients is not needed anymore

commit c9f68a83f5cd ("ipvs: move ip_route_me_harder for ICMP")
from 2.6.37 introduced ip_route_me_harder() call for responses to
local clients, so that we can provide valid rt_src after SNAT.
It was used by TCP to provide valid daddr for ip_send_reply().
After commit 07b4079ae327 ("ipv4: Pass explicit daddr arg to
ip_send_reply()." from 3.0 this rerouting is not needed anymore
and should be avoided, especially in LOCAL_IN.

Fixes 3.12.33 crash in xfrm reported by Florian Wiessner:
"3.12.33 - BUG xfrm_selector_match+0x25/0x2f6"

Reported-by: Smart Weblications GmbH - Florian Wiessner <f.wiessner@smart-weblications.de>
Tested-by: Smart Weblications GmbH - Florian Wiessner <f.wiessner@smart-weblications.de>
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
net/netfilter/ipvs/ip_vs_core.c