diff options
| author | Ritaro Takenaka <ritarot634@gmail.com> | 2022-05-25 15:55:48 +0900 |
|---|---|---|
| committer | Hauke Mehrtens <hauke@hauke-m.de> | 2022-07-03 20:00:16 +0200 |
| commit | 6d891adf390dd232c63fa77a8e71750495c04159 (patch) | |
| tree | aff4a0fb66d549b5a7f549c75712a59a0bb6efd9 /target/linux/generic/pending-5.4/645-netfilter-nf_flow_table-rework-hardware-offload-time.patch | |
| parent | 78b7515c2ea0cf6ed69ae12bcdfce928c6897f16 (diff) | |
| download | upstream-6d891adf390dd232c63fa77a8e71750495c04159.tar.gz upstream-6d891adf390dd232c63fa77a8e71750495c04159.tar.bz2 upstream-6d891adf390dd232c63fa77a8e71750495c04159.zip | |
kernel: check dst of flow offloading table
Flow offload dst can become invalid after the route cache is created.
dst_check() in packet path is necessary to prevent packet drop.
Signed-off-by: Ritaro Takenaka <ritarot634@gmail.com>
Diffstat (limited to 'target/linux/generic/pending-5.4/645-netfilter-nf_flow_table-rework-hardware-offload-time.patch')
| -rw-r--r-- | target/linux/generic/pending-5.4/645-netfilter-nf_flow_table-rework-hardware-offload-time.patch | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/target/linux/generic/pending-5.4/645-netfilter-nf_flow_table-rework-hardware-offload-time.patch b/target/linux/generic/pending-5.4/645-netfilter-nf_flow_table-rework-hardware-offload-time.patch index 3c44c29273..f4efbcdda8 100644 --- a/target/linux/generic/pending-5.4/645-netfilter-nf_flow_table-rework-hardware-offload-time.patch +++ b/target/linux/generic/pending-5.4/645-netfilter-nf_flow_table-rework-hardware-offload-time.patch @@ -16,7 +16,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name> --- a/include/net/netfilter/nf_flow_table.h +++ b/include/net/netfilter/nf_flow_table.h -@@ -75,6 +75,7 @@ struct flow_offload_tuple_rhash { +@@ -78,6 +78,7 @@ struct flow_offload_tuple_rhash { #define FLOW_OFFLOAD_DYING 0x4 #define FLOW_OFFLOAD_TEARDOWN 0x8 #define FLOW_OFFLOAD_HW 0x10 @@ -26,7 +26,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name> struct flow_offload_tuple_rhash tuplehash[FLOW_OFFLOAD_DIR_MAX]; --- a/net/netfilter/nf_flow_table_core.c +++ b/net/netfilter/nf_flow_table_core.c -@@ -370,7 +370,7 @@ static void nf_flow_offload_gc_step(stru +@@ -383,7 +383,7 @@ static void nf_flow_offload_gc_step(stru if (!teardown) nf_ct_offload_timeout(flow); |