ipvs: fix oops in backup for fwmark conn templates
Fixes bug http://bugzilla.kernel.org/show_bug.cgi?id=10556 where conn templates with protocol=IPPROTO_IP can oops backup box. Result from ip_vs_proto_get() should be checked because protocol value can be invalid or unsupported in backup. But for valid message we should not fail for templates which use IPPROTO_IP. Also, add checks to validate message limits and connection state. Show state NONE for templates using IPPROTO_IP. Signed-off-by:Julian Anastasov <ja@ssi.bg> Signed-off-by:
David S. Miller <davem@davemloft.net>
Showing
- include/net/ip_vs.h 2 additions, 1 deletioninclude/net/ip_vs.h
- net/ipv4/ipvs/ip_vs_proto.c 1 addition, 1 deletionnet/ipv4/ipvs/ip_vs_proto.c
- net/ipv4/ipvs/ip_vs_proto_ah.c 1 addition, 0 deletionsnet/ipv4/ipvs/ip_vs_proto_ah.c
- net/ipv4/ipvs/ip_vs_proto_esp.c 1 addition, 0 deletionsnet/ipv4/ipvs/ip_vs_proto_esp.c
- net/ipv4/ipvs/ip_vs_proto_tcp.c 1 addition, 0 deletionsnet/ipv4/ipvs/ip_vs_proto_tcp.c
- net/ipv4/ipvs/ip_vs_proto_udp.c 1 addition, 0 deletionsnet/ipv4/ipvs/ip_vs_proto_udp.c
- net/ipv4/ipvs/ip_vs_sync.c 59 additions, 21 deletionsnet/ipv4/ipvs/ip_vs_sync.c
Loading
Please register or sign in to comment