diff options
| author | Dimitri Staessens <dimitri@ouroboros.rocks> | 2026-05-03 17:00:15 +0200 |
|---|---|---|
| committer | Sander Vrijders <sander@ouroboros.rocks> | 2026-05-20 08:17:05 +0200 |
| commit | 875df4e784530430b13e77f4c37e37466db4ef3c (patch) | |
| tree | 99bc2b5c8dd7eae690d9d1f39750f0b468d9c5c0 /src/lib/ssm/flow_set.c | |
| parent | ee329b9047532c7e9199bba2246992ea1a619df8 (diff) | |
| download | ouroboros-875df4e784530430b13e77f4c37e37466db4ef3c.tar.gz ouroboros-875df4e784530430b13e77f4c37e37466db4ef3c.zip | |
ipcpd: Reject outbound packets on eth
AF_PACKET under `tc netem duplicate`, produces an extra
PACKET_OUTGOING frame at the source that receive path didn't reject.
Read with recvfrom(2) and discard frames whose sll_pkttype is
PACKET_OUTGOING. Restores the dst-MAC check body (defense in depth,
also bumps n_bad_id) so any frame addressed neither to us nor the
broadcast MAC is dropped before flow lookup.
Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks>
Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
Diffstat (limited to 'src/lib/ssm/flow_set.c')
0 files changed, 0 insertions, 0 deletions