netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

netstack: verify stack supports protocol before finding route

Browse Source 
Not doing so breaks the assumption of later code that netProto is supported by
the stack.

PiperOrigin-RevId: 571436763
This commit is contained in:
Kevin Krakauer
2023-10-06 14:36:44 -07:00
committed by gVisor bot
parent ba1c60263e
commit 9cb26fd34f
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/tcpip/stack/stack.go
+5
View File
@@ -1305,6 +1305,11 @@ func (s *Stack) FindRoute(id tcpip.NICID, localAddr, remoteAddr tcpip.Address, n
s.mu.RLock()
defer s.mu.RUnlock()
// Reject attempts to use unsupported protocols.
if !s.CheckNetworkProtocol(netProto) {
return nil, &tcpip.ErrUnknownProtocol{}
}
isLinkLocal := header.IsV6LinkLocalUnicastAddress(remoteAddr) || header.IsV6LinkLocalMulticastAddress(remoteAddr)
isLocalBroadcast := remoteAddr == header.IPv4Broadcast
isMulticast := header.IsV4MulticastAddress(remoteAddr) || header.IsV6MulticastAddress(remoteAddr)