Without options copied to the dst tun_info in iptunnel_metadata_reply()
called by arp_process for handling arp_request, the generated arp_reply
packet may be dropped or sent out with wrong options for some tunnels
like erspan and vxlan, and the traffic will break.

Signed-off-by: Xin Long <lucien....@gmail.com>
---
 net/ipv4/ip_tunnel_core.c | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/net/ipv4/ip_tunnel_core.c b/net/ipv4/ip_tunnel_core.c
index 1452a97..10f0848 100644
--- a/net/ipv4/ip_tunnel_core.c
+++ b/net/ipv4/ip_tunnel_core.c
@@ -126,15 +126,14 @@ struct metadata_dst *iptunnel_metadata_reply(struct 
metadata_dst *md,
 
        if (!md || md->type != METADATA_IP_TUNNEL ||
            md->u.tun_info.mode & IP_TUNNEL_INFO_TX)
-
                return NULL;
 
-       res = metadata_dst_alloc(0, METADATA_IP_TUNNEL, flags);
+       src = &md->u.tun_info;
+       res = metadata_dst_alloc(src->options_len, METADATA_IP_TUNNEL, flags);
        if (!res)
                return NULL;
 
        dst = &res->u.tun_info;
-       src = &md->u.tun_info;
        dst->key.tun_id = src->key.tun_id;
        if (src->mode & IP_TUNNEL_INFO_IPV6)
                memcpy(&dst->key.u.ipv6.dst, &src->key.u.ipv6.src,
@@ -143,6 +142,8 @@ struct metadata_dst *iptunnel_metadata_reply(struct 
metadata_dst *md,
                dst->key.u.ipv4.dst = src->key.u.ipv4.src;
        dst->key.tun_flags = src->key.tun_flags;
        dst->mode = src->mode | IP_TUNNEL_INFO_TX;
+       ip_tunnel_info_opts_set(dst, ip_tunnel_info_opts(src),
+                               src->options_len, 0);
 
        return res;
 }
-- 
2.1.0

Reply via email to