[BRIDGE]: drop PAUSE frames

Pause frames should never make it out of the network device into
the stack. But if a device was misconfigured, it might happen.
So drop pause frames in bridge.

Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 6 insertions, 1 deletions

diff --git a/net/bridge/br_input.c b/net/bridge/br_input.c
index 364e0ba44158..5662567c8aed 100644
--- a/net/bridge/br_input.c
+++ b/net/bridge/br_input.c
@@ -131,9 +131,14 @@ struct sk_buff *br_handle_frame(struct net_bridge_port *p, struct sk_buff *skb)
         if (!is_valid_ether_addr(eth_hdr(skb)->h_source))
                 goto drop;
 
-        if (unlikely(is_link_local(dest)))
+        if (unlikely(is_link_local(dest))) {
+                /* Pause frames shouldn't be passed up by driver anyway */
+                if (skb->protocol == htons(ETH_P_PAUSE))
+                        goto drop;
+
                 return (NF_HOOK(PF_BRIDGE, NF_BR_LOCAL_IN, skb, skb->dev,
                                 NULL, br_handle_local_finish) == 0) ? skb : NULL;
+        }
 
         switch (p->state) {
         case BR_STATE_FORWARDING: