On Thu, 2017-01-26 at 10:00 -0800, Eric Dumazet wrote: > On Thu, 2017-01-26 at 17:24 +0100, Florian Westphal wrote: > > > I think it makes sense to set dst->incoming > > to a stub in br_netfilter_rtable_init() to just kfree_skb()+ > > WARN_ON_ONCE(), no need to add code to ip stack or crash kernel > > due to brnf bug. > > Just kfree_skb() would hide bugs. > > Dropping packets is not uncommon in networking... > > I would rather use at least a WARN_ON_ONCE() before the kfree_skb() ;) Oh well, I obviously did not parse properly your suggestion. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html