summaryrefslogtreecommitdiffstats
path: root/net/8021q/Makefile
diff options
context:
space:
mode:
authorJoe Stringer <joe@ovn.org>2016-05-11 10:29:26 -0700
committerDavid S. Miller <davem@davemloft.net>2016-05-11 15:14:56 -0400
commit16ec3d4fbb967bd0e1c8d9dce9ef70e915a86615 (patch)
tree1ff4a7f34f35711958bbb8ea1840b56944df97ec /net/8021q/Makefile
parent6e14313f01f02f324d5dd68a49d34ec1e4bb569e (diff)
downloadlinux-16ec3d4fbb967bd0e1c8d9dce9ef70e915a86615.tar.bz2
openvswitch: Fix cached ct with helper.
When using conntrack helpers from OVS, a common configuration is to perform a lookup without specifying a helper, then go through a firewalling policy, only to decide to attach a helper afterwards. In this case, the initial lookup will cause a ct entry to be attached to the skb, then the later commit with helper should attach the helper and confirm the connection. However, the helper attachment has been missing. If the user has enabled automatic helper attachment, then this issue will be masked as it will be applied in init_conntrack(). It is also masked if the action is executed from ovs_packet_cmd_execute() as that will construct a fresh skb. This patch fixes the issue by making an explicit call to try to assign the helper if there is a discrepancy between the action's helper and the current skb->nfct. Fixes: cae3a2627520 ("openvswitch: Allow attaching helpers to ct action") Signed-off-by: Joe Stringer <joe@ovn.org> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/8021q/Makefile')
0 files changed, 0 insertions, 0 deletions