• Antonio Quartulli's avatar
    batman-adv: clean nf state when removing protocol header · 55883fd1
    Antonio Quartulli authored
    If an interface enslaved into batman-adv is a bridge (or a
    virtual interface built on top of a bridge) the nf_bridge
    member of the skbs reaching the soft-interface is filled
    with the state about "netfilter bridge" operations.
    
    Then, if one of such skbs is locally delivered, the nf_bridge
    member should be cleaned up to avoid that the old state
    could mess up with other "netfilter bridge" operations when
    entering a second bridge.
    This is needed because batman-adv is an encapsulation
    protocol.
    
    However at the moment skb->nf_bridge is not released at all
    leading to bogus "netfilter bridge" behaviours.
    
    Fix this by cleaning the netfilter state of the skb before
    it gets delivered to the upper layer in interface_rx().
    Signed-off-by: default avatarAntonio Quartulli <antonio@meshcoding.com>
    Signed-off-by: default avatarMarek Lindner <mareklindner@neomailbox.ch>
    55883fd1
soft-interface.c 27.7 KB