summaryrefslogtreecommitdiff
path: root/target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch
diff options
context:
space:
mode:
authorLuka Perkov <luka@openwrt.org>2014-06-27 21:10:02 +0000
committerLuka Perkov <luka@openwrt.org>2014-06-27 21:10:02 +0000
commitabc694b463dd9c2f2c9a7b22c3191260b94b1f04 (patch)
treeaf229c9b6fc7f469f3777db82aa015655af45f70 /target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch
parent4fe76889c0e956d6a7d1ee96af5f681e8e81ee8b (diff)
downloadmtk-20170518-abc694b463dd9c2f2c9a7b22c3191260b94b1f04.zip
mtk-20170518-abc694b463dd9c2f2c9a7b22c3191260b94b1f04.tar.gz
mtk-20170518-abc694b463dd9c2f2c9a7b22c3191260b94b1f04.tar.bz2
kernel: update 3.14 to 3.14.9
Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 41362
Diffstat (limited to 'target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch')
-rw-r--r--target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch8
1 files changed, 4 insertions, 4 deletions
diff --git a/target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch b/target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch
index 948d4eb..d12f7a6 100644
--- a/target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch
+++ b/target/linux/generic/patches-3.14/120-bridge_allow_receiption_on_disabled_port.patch
@@ -23,11 +23,11 @@ Signed-off-by: Felix Fietkau <nbd@openwrt.org>
+ if (p->state != BR_STATE_DISABLED) {
+ u16 vid = 0;
-- br_vlan_get_tag(skb, &vid);
-- if (p->flags & BR_LEARNING)
+- /* check if vlan is allowed, to avoid spoofing */
+- if (p->flags & BR_LEARNING && br_should_learn(p, skb, &vid))
- br_fdb_update(p->br, p, eth_hdr(skb)->h_source, vid, false);
-+ br_vlan_get_tag(skb, &vid);
-+ if (p->flags & BR_LEARNING)
++ /* check if vlan is allowed, to avoid spoofing */
++ if (p->flags & BR_LEARNING && br_should_learn(p, skb, &vid))
+ br_fdb_update(p->br, p, eth_hdr(skb)->h_source, vid, false);
+ }
return 0; /* process further */