From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexander Aring Subject: Re: [PATCH net] ieee802154: lowpan_header_create check must check daddr Date: Sun, 23 Dec 2018 15:53:37 -0500 Message-ID: <20181223205337.sehclrqsr6cuqy2o@x220t> References: <20181223175218.165576-1-willemdebruijn.kernel@gmail.com> <20181223204547.aqtr7jxwzdvteao6@x220t> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Cc: netdev@vger.kernel.org, davem@davemloft.net, alex.aring@gmail.com, jukka.rissanen@linux.intel.com, Willem de Bruijn To: Willem de Bruijn Return-path: Received: from mail-io1-f66.google.com ([209.85.166.66]:46039 "EHLO mail-io1-f66.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725828AbeLWUxo (ORCPT ); Sun, 23 Dec 2018 15:53:44 -0500 Received: by mail-io1-f66.google.com with SMTP id p7so4614829iog.12 for ; Sun, 23 Dec 2018 12:53:43 -0800 (PST) Content-Disposition: inline In-Reply-To: <20181223204547.aqtr7jxwzdvteao6@x220t> Sender: netdev-owner@vger.kernel.org List-ID: Hi, ... > I need to admit, I never tried AF_PACKET on a lowpan interface but I > thought about it that it ends in bad things... I would like to forbid > it, because they should use RAW IPv6 sockets where at least we already > have code to check that we have at least a IPv6 header at > skb_packer_header() (I hope this is how it works). > > Is there any way to do that? > At least forbid the sending via AF_PACKET, receiving has of course a use case for all protocol analyzers outside. - Alex