netfilter: ip6t_rpfilter: Fix regression with VRF interfaces

Browse source

[ Upstream commit efb056e5f1 ]

When calling ip6_route_lookup() for the packet arriving on the VRF
interface, the result is always the real (slave) interface. Expect this
when validating the result.

Fixes: acc641ab95 ("netfilter: rpfilter/fib: Populate flowic_l3mdev field")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Phil Sutter 2023-02-16 17:05:36 +01:00 • committed by Greg Kroah-Hartman

parent 1fd3c69f65

commit 8291cfdfa6

2 changed files with 29 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

net/ipv6/netfilter/ip6t_rpfilter.c

View file

32

tools/testing/selftests/netfilter/rpath.sh

View file