]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
openvswitch: Respect conntrack zone even if invalid
authorJoe Stringer <joe@ovn.org>
Wed, 9 Dec 2015 22:07:40 +0000 (14:07 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 23 Jan 2016 04:55:47 +0000 (20:55 -0800)
commitdcc8a72b261b6483e351e997da1090773db33f13
tree22d1a21e1e1ef6a7ddbca101156561b5a46e6cf6
parent09a44c49189b5fde2e4669e7ee01df5afe703351
openvswitch: Respect conntrack zone even if invalid

[ Upstream commit d110986c5ddb1caf576e8576044c0c831e3e7fa4 ]

If userspace executes ct(zone=1), and the connection tracker determines
that the packet is invalid, then the ct_zone flow key field is populated
with the default zone rather than the zone that was specified. Even
though connection tracking failed, this field should be updated with the
value that the action specified. Fix the issue.

Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
Signed-off-by: Joe Stringer <joe@ovn.org>
Acked-by: Pravin B Shelar <pshelar@nicira.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/openvswitch/conntrack.c