ip6_vti: Return an error when adding an existing tunnel.
authorSteffen Klassert <steffen.klassert@secunet.com>
Mon, 22 Sep 2014 08:07:25 +0000 (10:07 +0200)
committerDavid S. Miller <davem@davemloft.net>
Sun, 28 Sep 2014 20:19:46 +0000 (16:19 -0400)
vti6_locate() should not return an existing tunnel if
create is true. Otherwise it is possible to add the same
tunnel multiple times without getting an error.

So return NULL if the tunnel that should be created already
exists.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/ip6_vti.c

index 7f52fd9..5833a22 100644 (file)
@@ -253,8 +253,12 @@ static struct ip6_tnl *vti6_locate(struct net *net, struct __ip6_tnl_parm *p,
             (t = rtnl_dereference(*tp)) != NULL;
             tp = &t->next) {
                if (ipv6_addr_equal(local, &t->parms.laddr) &&
-                   ipv6_addr_equal(remote, &t->parms.raddr))
+                   ipv6_addr_equal(remote, &t->parms.raddr)) {
+                       if (create)
+                               return NULL;
+
                        return t;
+               }
        }
        if (!create)
                return NULL;