From: Flavio Leitner Date: Mon, 24 Oct 2011 06:56:38 +0000 (-0400) Subject: route: fix ICMP redirect validation X-Git-Tag: v3.2-rc1~182^2~10^2~4 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7cc9150ebe8ec06cafea9f1c10d92ddacf88d8ae;p=pandora-kernel.git route: fix ICMP redirect validation The commit f39925dbde7788cfb96419c0f092b086aa325c0f (ipv4: Cache learned redirect information in inetpeer.) removed some ICMP packet validations which are required by RFC 1122, section 3.2.2.2: ... A Redirect message SHOULD be silently discarded if the new gateway address it specifies is not on the same connected (sub-) net through which the Redirect arrived [INTRO:2, Appendix A], or if the source of the Redirect is not the current first-hop gateway for the specified destination (see Section 3.3.1). Signed-off-by: Flavio Leitner Signed-off-by: David S. Miller --- Reading git-diff-tree failed