ipvs: fix oops in backup for fwmark conn templates
Fixes bug http://bugzilla.kernel.org/show_bug.cgi?id=10556 where conn templates with protocol=IPPROTO_IP can oops backup box. Result from ip_vs_proto_get() should be checked because protocol value can be invalid or unsupported in backup. But for valid message we should not fail for templates which use IPPROTO_IP. Also, add checks to validate message limits and connection state. Show state NONE for templates using IPPROTO_IP. Signed-off-by: Julian Anastasov <ja@ssi.bg> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
committed by
David S. Miller
parent
d69efb1689
commit
2ad17defd5
@ -405,7 +405,8 @@ struct sk_buff;
|
||||
struct ip_vs_protocol {
|
||||
struct ip_vs_protocol *next;
|
||||
char *name;
|
||||
__u16 protocol;
|
||||
u16 protocol;
|
||||
u16 num_states;
|
||||
int dont_defrag;
|
||||
atomic_t appcnt; /* counter of proto app incs */
|
||||
int *timeout_table; /* protocol timeout table */
|
||||
|
Reference in New Issue
Block a user