[WireGuard] [PATCH] ip6_output: ensure flow saddr actually belongs to device
Jason A. Donenfeld
Jason at zx2c4.com
Sun Nov 13 21:19:47 CET 2016
Hi David,
On Sun, Nov 13, 2016 at 5:30 PM, David Ahern <dsa at cumulusnetworks.com> wrote:
> You can't require the address to be on the dst device. e.g., it can be an address from the loopback/vrf device.
>
> This block needs to be done at function entry, and pass dev as NULL to mean is the address assigned to any interface. That gets you the equivalency of the IPv4 check.
I gave v2 my best shot. Hopefully it's adequate, but I have a feeling
it might be best for you to just code up what you have in mind.
Regards,
Jason
More information about the WireGuard
mailing list