diff options
| author | Paul Moore <paul@paul-moore.com> | 2020-09-28 04:38:26 +0200 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2020-11-24 00:36:21 +0100 |
| commit | 3df98d79215ace13d1e91ddfc5a67a0f5acbd83f (patch) | |
| tree | 3e0db692f0d85f9a73ec0e2dd4298bda62f57b8b /net/l2tp | |
| parent | selinux: Fix fall-through warnings for Clang (diff) | |
| download | linux-3df98d79215ace13d1e91ddfc5a67a0f5acbd83f.tar.xz linux-3df98d79215ace13d1e91ddfc5a67a0f5acbd83f.zip | |
lsm,selinux: pass flowi_common instead of flowi to the LSM hooks
As pointed out by Herbert in a recent related patch, the LSM hooks do
not have the necessary address family information to use the flowi
struct safely. As none of the LSMs currently use any of the protocol
specific flowi information, replace the flowi pointers with pointers
to the address family independent flowi_common struct.
Reported-by: Herbert Xu <herbert@gondor.apana.org.au>
Acked-by: James Morris <jamorris@linux.microsoft.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'net/l2tp')
| -rw-r--r-- | net/l2tp/l2tp_ip6.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/l2tp/l2tp_ip6.c b/net/l2tp/l2tp_ip6.c index e5e5036257b0..96f975777438 100644 --- a/net/l2tp/l2tp_ip6.c +++ b/net/l2tp/l2tp_ip6.c @@ -606,7 +606,7 @@ static int l2tp_ip6_sendmsg(struct sock *sk, struct msghdr *msg, size_t len) else if (!fl6.flowi6_oif) fl6.flowi6_oif = np->ucast_oif; - security_sk_classify_flow(sk, flowi6_to_flowi(&fl6)); + security_sk_classify_flow(sk, flowi6_to_flowi_common(&fl6)); if (ipc6.tclass < 0) ipc6.tclass = np->tclass; |