提交 50b2ff1b 编写于 作者: P Paul Moore 提交者: David S. Miller

netlabel: Always remove the correct address selector

The NetLabel address selector mechanism has a problem where it can get
mistakenly remove the wrong selector when similar addresses are used.  The
problem is caused when multiple addresses are configured that have different
netmasks but the same address, e.g. 127.0.0.0/8 and 127.0.0.0/24.  This patch
fixes the problem.
Reported-by: NEtienne Basset <etienne.basset@numericable.fr>
Signed-off-by: NPaul Moore <paul.moore@hp.com>
Acked-by: NJames Morris <jmorris@namei.org>
Tested-by: NEtienne Basset <etienne.basset@numericable.fr>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>
上级 cef309cf
...@@ -256,13 +256,11 @@ struct netlbl_af4list *netlbl_af4list_remove(__be32 addr, __be32 mask, ...@@ -256,13 +256,11 @@ struct netlbl_af4list *netlbl_af4list_remove(__be32 addr, __be32 mask,
{ {
struct netlbl_af4list *entry; struct netlbl_af4list *entry;
entry = netlbl_af4list_search(addr, head); entry = netlbl_af4list_search_exact(addr, mask, head);
if (entry != NULL && entry->addr == addr && entry->mask == mask) { if (entry == NULL)
netlbl_af4list_remove_entry(entry); return NULL;
return entry; netlbl_af4list_remove_entry(entry);
} return entry;
return NULL;
} }
#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE) #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
...@@ -299,15 +297,11 @@ struct netlbl_af6list *netlbl_af6list_remove(const struct in6_addr *addr, ...@@ -299,15 +297,11 @@ struct netlbl_af6list *netlbl_af6list_remove(const struct in6_addr *addr,
{ {
struct netlbl_af6list *entry; struct netlbl_af6list *entry;
entry = netlbl_af6list_search(addr, head); entry = netlbl_af6list_search_exact(addr, mask, head);
if (entry != NULL && if (entry == NULL)
ipv6_addr_equal(&entry->addr, addr) && return NULL;
ipv6_addr_equal(&entry->mask, mask)) { netlbl_af6list_remove_entry(entry);
netlbl_af6list_remove_entry(entry); return entry;
return entry;
}
return NULL;
} }
#endif /* IPv6 */ #endif /* IPv6 */
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册