netfilter: nf_flow_table_offload: check the status of dst_neigh
authorwenxu <wenxu@ucloud.cn>
Fri, 20 Dec 2019 04:14:37 +0000 (12:14 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 5 Jan 2020 09:06:31 +0000 (10:06 +0100)
commitf31ad71c44c17e55d9a6fa24f8249a15365cf8b2
tree41d73e41e76d1fce0a260c9befb3d3255da31ece
parent1b67e50601fabc9589022e6b5e79fd8596c2338e
netfilter: nf_flow_table_offload: check the status of dst_neigh

It is better to get the dst_neigh with neigh->lock and check the
nud_state is VALID. If there is not neigh previous, the lookup will
Create a non NUD_VALID with 00:00:00:00:00:00 mac.

Fixes: c29f74e0df7a ("netfilter: nf_flow_table: hardware offload support")
Signed-off-by: wenxu <wenxu@ucloud.cn>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_offload.c