]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f9a4300) | patch
netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag
authorwenxu <wenxu@chinatelecom.cn>
Thu, 26 May 2022 01:25:45 +0000 (21:25 -0400)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 31 May 2022 21:14:03 +0000 (23:14 +0200)
commitf1896d45fee90a868dfd0b3cc119e4cc1bbd7ca2
treed5626e76f7667d1dc0f8ef308bb7163124a5a232tree | snapshot
parentf9a43007d3f7ba76d5e7f9421094f00f2ef202f8commit | diff
netfilter: flowtable: fix missing FLOWI_FLAG_ANYSRC flag

The nf_flow_table gets route through ip_route_output_key. If the saddr
is not local one, then FLOWI_FLAG_ANYSRC flag should be set. Without
this flag, the route lookup for other_dst will fail.

Fixes: 3412e1641828 (netfilter: flowtable: nft_flow_route use more data for reverse route)
Signed-off-by: wenxu <wenxu@chinatelecom.cn>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_flow_offload.c diff | blob | history
Linux Kernel Source Tree.