bridge: Verify that a vlan is allowed to egress on given port

When bridge forwards a frame, make sure that a frame is allowed
to egress on that port.

Signed-off-by: Vlad Yasevich <vyasevic@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 1 insertions, 0 deletions

diff --git a/net/bridge/br_forward.c b/net/bridge/br_forward.c
index 02015a505d2a..35b0671f135d 100644
--- a/net/bridge/br_forward.c
+++ b/net/bridge/br_forward.c
@@ -31,6 +31,7 @@ static inline int should_deliver(const struct net_bridge_port *p,
                                  const struct sk_buff *skb)
 {
         return (((p->flags & BR_HAIRPIN_MODE) || skb->dev != p->dev) &&
+                br_allowed_egress(p->br, nbp_get_vlan_info(p), skb) &&
                 p->state == BR_STATE_FORWARDING);
 }