From: Toshiaki Makita Date: Mon, 26 May 2014 06:15:53 +0000 (+0900) Subject: bridge: Prevent insertion of FDB entry with disallowed vlan X-Git-Tag: omap-for-v3.16/fixes-against-rc1~107^2~9 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e0d7968ab6c8bce2437b36fa7f04117e333f196d;p=pandora-kernel.git bridge: Prevent insertion of FDB entry with disallowed vlan br_handle_local_finish() is allowing us to insert an FDB entry with disallowed vlan. For example, when port 1 and 2 are communicating in vlan 10, and even if vlan 10 is disallowed on port 3, port 3 can interfere with their communication by spoofed src mac address with vlan id 10. Note: Even if it is judged that a frame should not be learned, it should not be dropped because it is destined for not forwarding layer but higher layer. See IEEE 802.1Q-2011 8.13.10. Signed-off-by: Toshiaki Makita Acked-by: Vlad Yasevich Signed-off-by: David S. Miller --- Reading git-diff-tree failed