diff options
| author | Patrick McHardy <kaber@trash.net> | 2007-07-18 11:04:39 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2007-07-18 11:04:39 +0200 |
| commit | f77ae9390438409b535f3b1854672e54120cd38b (patch) | |
| tree | 78abc13739257460d7d6e4ed97c840cf41b53fb7 /drivers/net/pppol2tp.c | |
| parent | [PPPOL2TP]: Fix use-after-free (diff) | |
| download | linux-f77ae9390438409b535f3b1854672e54120cd38b.tar.xz linux-f77ae9390438409b535f3b1854672e54120cd38b.zip | |
[PPPOL2TP]: Reset meta-data in xmit function
Reset netfilter data and IP CB, fix dst_entry leak.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net/pppol2tp.c')
| -rw-r--r-- | drivers/net/pppol2tp.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/drivers/net/pppol2tp.c b/drivers/net/pppol2tp.c index 856610f0624e..f87176055d0e 100644 --- a/drivers/net/pppol2tp.c +++ b/drivers/net/pppol2tp.c @@ -1049,7 +1049,13 @@ static int pppol2tp_xmit(struct ppp_channel *chan, struct sk_buff *skb) printk("\n"); } + memset(&(IPCB(skb2)->opt), 0, sizeof(IPCB(skb2)->opt)); + IPCB(skb2)->flags &= ~(IPSKB_XFRM_TUNNEL_SIZE | IPSKB_XFRM_TRANSFORMED | + IPSKB_REROUTED); + nf_reset(skb2); + /* Get routing info from the tunnel socket */ + dst_release(skb2->dst); skb2->dst = sk_dst_get(sk_tun); /* Queue the packet to IP for output */ |