From: David Miller Date: Mon, 6 Apr 2015 02:19:04 +0000 (-0400) Subject: netfilter: Pass socket pointer down through okfn(). X-Git-Tag: omap-for-v4.1/fixes-rc1~141^2~66^2~1 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7026b1ddb6b8d4e6ee33dc2bd06c0ca8746fa7ab;p=pandora-kernel.git netfilter: Pass socket pointer down through okfn(). On the output paths in particular, we have to sometimes deal with two socket contexts. First, and usually skb->sk, is the local socket that generated the frame. And second, is potentially the socket used to control a tunneling socket, such as one the encapsulates using UDP. We do not want to disassociate skb->sk when encapsulating in order to fix this, because that would break socket memory accounting. The most extreme case where this can cause huge problems is an AF_PACKET socket transmitting over a vxlan device. We hit code paths doing checks that assume they are dealing with an ipv4 socket, but are actually operating upon the AF_PACKET one. Signed-off-by: David S. Miller --- Reading git-diff-tree failed