]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 19a5c70) | patch
netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag
authorwenxu <wenxu@chinatelecom.cn>
Thu, 26 May 2022 01:25:45 +0000 (21:25 -0400)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 31 May 2022 21:14:03 +0000 (23:14 +0200)
commit27328949fae725bac8423f9fd970fae82140e10e
treed5626e76f7667d1dc0f8ef308bb7163124a5a232tree | snapshot
parent19a5c700111f8bfc3de0517aab8476fe1cb9d74acommit | diff
netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag

The nf_flow_table gets route through ip_route_output_key. If the saddr
is not local one, then FLOWI_FLAG_ANYSRC flag should be set. Without
this flag, the route lookup for other_dst will fail.

Fixes: fb0f8e678cd4 (netfilter: flowtable: nft_flow_route use more data for reverse route)
Signed-off-by: wenxu <wenxu@chinatelecom.cn>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_flow_offload.c diff | blob | history
Linux Kernel Source Tree.