diff options
author | Hannes Frederic Sowa <hannes@stressinduktion.org> | 2014-01-19 23:16:39 -0500 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2014-01-21 19:59:19 -0500 |
commit | 82b276cd2b0bacd58e7c307bf8856925a68c4d14 (patch) | |
tree | ffc8648efa91f83f81c94ac83447dc5246a835cf /net/ipv6/ping.c | |
parent | 446fab59333dea91e54688f033dd8d788d0486fb (diff) |
ipv6: protect protocols not handling ipv4 from v4 connection/bind attempts
Some ipv6 protocols cannot handle ipv4 addresses, so we must not allow
connecting and binding to them. sendmsg logic does already check msg->name
for this but must trust already connected sockets which could be set up
for connection to ipv4 address family.
Per-socket flag ipv6only is of no use here, as it is under users control
by setsockopt.
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/ping.c')
-rw-r--r-- | net/ipv6/ping.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv6/ping.c b/net/ipv6/ping.c index 94a3d04c3200..fb9beb78f00b 100644 --- a/net/ipv6/ping.c +++ b/net/ipv6/ping.c | |||
@@ -31,7 +31,7 @@ struct proto pingv6_prot = { | |||
31 | .owner = THIS_MODULE, | 31 | .owner = THIS_MODULE, |
32 | .init = ping_init_sock, | 32 | .init = ping_init_sock, |
33 | .close = ping_close, | 33 | .close = ping_close, |
34 | .connect = ip6_datagram_connect, | 34 | .connect = ip6_datagram_connect_v6_only, |
35 | .disconnect = udp_disconnect, | 35 | .disconnect = udp_disconnect, |
36 | .setsockopt = ipv6_setsockopt, | 36 | .setsockopt = ipv6_setsockopt, |
37 | .getsockopt = ipv6_getsockopt, | 37 | .getsockopt = ipv6_getsockopt, |