• Arnaud Ebalard's avatar
    IPv6: fix CoA check in RH2 input handler (mip6_rthdr_input()) · d9a9dc66
    Arnaud Ebalard authored
    The input handler for Type 2 Routing Header (mip6_rthdr_input())
    checks if the CoA in the packet matches the CoA in the XFRM state.
    
    Current check is buggy: it compares the adddress in the Type 2
    Routing Header, i.e. the HoA, against the expected CoA in the state.
    The comparison should be made against the address in the destination
    field of the IPv6 header.
    
    The bug remained unnoticed because the main (and possibly only current)
    user of the code (UMIP MIPv6 Daemon) initializes the XFRM state with the
    unspecified address, i.e. explicitly allows everything.
    
    Yoshifuji-san, can you ack that one?
    Signed-off-by: default avatarArnaud Ebalard <arno@natisbad.org>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    d9a9dc66
mip6.c 13.2 KB