ip6_tunnel: disable dst caching if tunnel is dual-stack (23263ec8) · Commits · 戴 / test

When an ip6_tunnel is in mode 'any', where the transport layer protocol can be either 4 or 41, dst_cache must be disabled. This is because xfrm policies might apply to only one of the two protocols. Caching dst would cause xfrm policies for one protocol incorrectly used for the other. Signed-off-by:

Eli Cooper <elicooper@gmx.com> Signed-off-by:

David S. Miller <davem@davemloft.net>

net/ipv6/ip6_tunnel.c

+5 −4

Original line number	Diff line number	Diff line
		@@ -1074,10 +1074,11 @@ int ip6_tnl_xmit(struct sk_buff skb, struct net_device dev, __u8 dsfield,
		memcpy(&fl6->daddr, addr6, sizeof(fl6->daddr));
		neigh_release(neigh);
		}
		} else if (!(t->parms.flags &
		(IP6_TNL_F_USE_ORIG_TCLASS \| IP6_TNL_F_USE_ORIG_FWMARK))) {
		/* enable the cache only only if the routing decision does
		* not depend on the current inner header value
		} else if (t->parms.proto != 0 && !(t->parms.flags &
		(IP6_TNL_F_USE_ORIG_TCLASS \|
		IP6_TNL_F_USE_ORIG_FWMARK))) {
		/* enable the cache only if neither the outer protocol nor the
		* routing decision depends on the current inner header value
		*/
		use_cache = true;
		}

Admin message