Messages in this thread | | | Date | Tue, 11 Mar 2014 23:23:25 -0400 (EDT) | Subject | Re: [PATCHv2 1/2] bridge: multicast: add sanity check for general query destination | From | David Miller <> |
| |
From: Linus Lüssing <linus.luessing@web.de> Date: Mon, 10 Mar 2014 22:25:24 +0100
> General IGMP and MLD queries are supposed to have the multicast > link-local all-nodes address as their destination according to RFC2236 > section 9, RFC3376 section 4.1.12/9.1, RFC2710 section 8 and RFC3810 > section 5.1.15. > > Without this check, such malformed IGMP/MLD queries can result in a > denial of service: The queries are ignored by most IGMP/MLD listeners > therefore they will not respond with an IGMP/MLD report. However, > without this patch these malformed MLD queries would enable the > snooping part in the bridge code, potentially shutting down the > according ports towards these hosts for multicast traffic as the > bridge did not learn about these listeners. > > Reported-by: Jan Stancek <jstancek@redhat.com> > Signed-off-by: Linus Lüssing <linus.luessing@web.de>
Applied. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |