netfilter: fib: check correct rtable in vrf setups
authorFlorian Westphal <fw@strlen.de>
Wed, 9 Oct 2024 07:19:02 +0000 (09:19 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 9 Oct 2024 21:30:31 +0000 (23:30 +0200)
commit05ef7055debc804e8083737402127975e7244fc4
tree59200e4c8bafb8033fc51e99a1a296aae8e7b96d
parent0bfcb7b71e735560077a42847f69597ec7dcc326
netfilter: fib: check correct rtable in vrf setups

We need to init l3mdev unconditionally, else main routing table is searched
and incorrect result is returned unless strict (iif keyword) matching is
requested.

Next patch adds a selftest for this.

Fixes: 2a8a7c0eaa87 ("netfilter: nft_fib: Fix for rpath check with VRF devices")
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1761
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/nft_fib_ipv4.c
net/ipv6/netfilter/nft_fib_ipv6.c