From: Paul Moore <[EMAIL PROTECTED]> Date: Mon, 07 Jan 2008 12:47:42 -0500
> Both NetLabel and SELinux (other LSMs may grow to use it as well) rely on the > 'iif' field to determine the receiving network interface of inbound packets. > Unfortunately, at present this field is not preserved across a skb clone > operation which can lead to garbage values if the cloned skb is sent back > through the network stack. This patch corrects this problem by properly > copying the 'iif' field in __skb_clone() and removing the 'iif' field > assignment from skb_act_clone() since it is no longer needed. > > Also, while we are here, put the assignments in the same order as the offsets > to reduce cacheline bounces. > > Signed-off-by: Paul Moore <[EMAIL PROTECTED]> Applied to net-2.6 and I think I'll toss this into -stable as well. Thanks. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html