[PATCH net 0/2] ipv6: drop encapsulated packets when no source address is available

[Justin Iurman <justin.iurman@gmail.com>]

Both ioam6 and seg6 (encap modes) lwtunnels select the source address of
the outer IPv6 header with ipv6_dev_get_saddr() when no tunnel source is
configured, but ignore its return value. When no usable address is
available (e.g. none configured yet in the L3 domain, or only tentative
ones), the outer source address is left untouched:
 - ioam6: it keeps the source address copied from the inner header,
   which may belong to another node for in-transit traffic;
 - seg6: the outer header has just been pushed, so it holds whatever
   stale bytes were in the skb headroom.

Both patches drop the packet in that case, like other encapsulation
failures.

Justin Iurman (2):
  ioam6: drop the packet if no outer source address is available
  seg6: drop the packet if no outer source address is available

 net/ipv6/ioam6_iptunnel.c | 11 +++++++----
 net/ipv6/seg6_iptunnel.c  | 26 ++++++++++++++++++--------
 2 files changed, 25 insertions(+), 12 deletions(-)

-- 
2.34.1