Skip to content
Snippets Groups Projects
Commit 30e2349b authored by David Bauer's avatar David Bauer
Browse files

modules: update openwrt

78d493af22 generic l2tp: drop flow hash on forward
a2943e3795 generic vxlan: don't learn non-unicast L2 destinations
b30b1d3685 mediatek: filogic: Cudy WR3000 v1 wps button fix
e94052bfee mac80211: ath11k: sync with upstream
parent 64cd0912
No related branches found
No related tags found
No related merge requests found
......@@ -2,7 +2,7 @@ GLUON_FEEDS='gluon packages routing'
OPENWRT_REPO=https://github.com/openwrt/openwrt.git
OPENWRT_BRANCH=openwrt-23.05
OPENWRT_COMMIT=48c81b80b27731b41e882b992b5c7b0813073fba
OPENWRT_COMMIT=78d493af229c2e20a81f01b1d87685da4a897822
PACKAGES_GLUON_REPO=https://github.com/freifunk-gluon/packages.git
PACKAGES_GLUON_COMMIT=53ea3b89771fc7d7a80f1800ce25e98dfe1633aa
......
From: David Bauer <mail@david-bauer.net>
Date: Sat, 17 Feb 2024 22:37:05 +0100
Subject: net vxlan: don't learn non-unicast L2 destinations
See Gluon #3191
Link: https://github.com/freifunk-gluon/gluon/issues/3191
Signed-off-by: David Bauer <mail@david-bauer.net>
diff --git a/target/linux/generic/hack-5.15/999-net-vxlan-don-t-learn-non-unicast-L2-destinations.patch b/target/linux/generic/hack-5.15/999-net-vxlan-don-t-learn-non-unicast-L2-destinations.patch
new file mode 100644
index 0000000000000000000000000000000000000000..0be8783287b32c33ec76e19b8407397f8f0fe5f3
--- /dev/null
+++ b/target/linux/generic/hack-5.15/999-net-vxlan-don-t-learn-non-unicast-L2-destinations.patch
@@ -0,0 +1,32 @@
+From 3f1a227cb071f65f6ecc4db9f399649869735a7c Mon Sep 17 00:00:00 2001
+From: David Bauer <mail@david-bauer.net>
+Date: Sat, 17 Feb 2024 22:34:59 +0100
+Subject: [PATCH] net vxlan: don't learn non-unicast L2 destinations
+
+See Gluon #3191
+
+Link: https://github.com/freifunk-gluon/gluon/issues/3191
+
+Signed-off-by: David Bauer <mail@david-bauer.net>
+---
+ drivers/net/vxlan.c | 4 ++++
+ 1 file changed, 4 insertions(+)
+
+diff --git a/drivers/net/vxlan/vxlan_core.c b/drivers/net/vxlan/vxlan_core.c
+index 141635a35c28..253a741d6c36 100644
+--- a/drivers/net/vxlan/vxlan_core.c
++++ b/drivers/net/vxlan/vxlan_core.c
+@@ -1467,6 +1467,10 @@ static bool vxlan_snoop(struct net_device *dev,
+ struct vxlan_fdb *f;
+ u32 ifindex = 0;
+
++ /* Don't learn broadcast packets (Gluon #3191) */
++ if (is_multicast_ether_addr(src_mac) || is_zero_ether_addr(src_mac))
++ return false;
++
+ #if IS_ENABLED(CONFIG_IPV6)
+ if (src_ip->sa.sa_family == AF_INET6 &&
+ (ipv6_addr_type(&src_ip->sin6.sin6_addr) & IPV6_ADDR_LINKLOCAL))
+--
+2.43.0
+
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment