summaryrefslogtreecommitdiffstats
path: root/net/ipv6/ip6_input.c
diff options
context:
space:
mode:
authorBrian Haley <brian.haley@hp.com>2011-11-08 04:41:42 +0000
committerDavid S. Miller <davem@davemloft.net>2011-11-08 12:37:06 -0500
commitc457338d7acd3823e765b684a62294cfda9d2f55 (patch)
tree7f055d507f54a4223b049bacd15c09b0d5548784 /net/ipv6/ip6_input.c
parent10953db8e1a278742ef7e64a3d1491802bcfa98b (diff)
downloadlinux-c457338d7acd3823e765b684a62294cfda9d2f55.tar.gz
linux-c457338d7acd3823e765b684a62294cfda9d2f55.tar.bz2
linux-c457338d7acd3823e765b684a62294cfda9d2f55.zip
ipv6: drop packets when source address is multicast
RFC 4291 Section 2.7 says Multicast addresses must not be used as source addresses in IPv6 packets - drop them on input so we don't process the packet further. Signed-off-by: Brian Haley <brian.haley@hp.com> Reported-and-Tested-by: Kumar Sanghvi <divinekumar@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/ip6_input.c')
-rw-r--r--net/ipv6/ip6_input.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/net/ipv6/ip6_input.c b/net/ipv6/ip6_input.c
index 027c7ff6f1e5..a46c64eb0a66 100644
--- a/net/ipv6/ip6_input.c
+++ b/net/ipv6/ip6_input.c
@@ -111,6 +111,14 @@ int ipv6_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt
ipv6_addr_loopback(&hdr->daddr))
goto err;
+ /*
+ * RFC4291 2.7
+ * Multicast addresses must not be used as source addresses in IPv6
+ * packets or appear in any Routing header.
+ */
+ if (ipv6_addr_is_multicast(&hdr->saddr))
+ goto err;
+
skb->transport_header = skb->network_header + sizeof(*hdr);
IP6CB(skb)->nhoff = offsetof(struct ipv6hdr, nexthdr);