From: Linus Lüssing <linus.luessing@xxxxxx> Date: Mon, 10 Mar 2014 22:25:24 +0100 > General IGMP and MLD queries are supposed to have the multicast > link-local all-nodes address as their destination according to RFC2236 > section 9, RFC3376 section 4.1.12/9.1, RFC2710 section 8 and RFC3810 > section 5.1.15. > > Without this check, such malformed IGMP/MLD queries can result in a > denial of service: The queries are ignored by most IGMP/MLD listeners > therefore they will not respond with an IGMP/MLD report. However, > without this patch these malformed MLD queries would enable the > snooping part in the bridge code, potentially shutting down the > according ports towards these hosts for multicast traffic as the > bridge did not learn about these listeners. > > Reported-by: Jan Stancek <jstancek@xxxxxxxxxx> > Signed-off-by: Linus Lüssing <linus.luessing@xxxxxx> Applied. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html