[NETFILTER]: Drop conntrack reference in ip_call_ra_chain()/ip_mr_input()
Drop reference before handing the packets to raw_rcv() Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
committed by
David S. Miller
parent
6150bacfec
commit
2715bcf9ef
@@ -184,6 +184,7 @@ int ip_call_ra_chain(struct sk_buff *skb)
|
|||||||
raw_rcv(last, skb2);
|
raw_rcv(last, skb2);
|
||||||
}
|
}
|
||||||
last = sk;
|
last = sk;
|
||||||
|
nf_reset(skb);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@@ -1350,6 +1350,7 @@ int ip_mr_input(struct sk_buff *skb)
|
|||||||
*/
|
*/
|
||||||
read_lock(&mrt_lock);
|
read_lock(&mrt_lock);
|
||||||
if (mroute_socket) {
|
if (mroute_socket) {
|
||||||
|
nf_reset(skb);
|
||||||
raw_rcv(mroute_socket, skb);
|
raw_rcv(mroute_socket, skb);
|
||||||
read_unlock(&mrt_lock);
|
read_unlock(&mrt_lock);
|
||||||
return 0;
|
return 0;
|
||||||
|
Reference in New Issue
Block a user