diff --git a/[refs] b/[refs] index fc6457128c5f..ac85560f9bf6 100644 --- a/[refs] +++ b/[refs] @@ -1,2 +1,2 @@ --- -refs/heads/master: fa03ef38e1516c1f35f6a189100186dded0f8f8c +refs/heads/master: 29556526b970c2e7d4ca808b6082c33981adfdff diff --git a/trunk/net/ipv6/ndisc.c b/trunk/net/ipv6/ndisc.c index 6a9f616de37d..39bb658f3c44 100644 --- a/trunk/net/ipv6/ndisc.c +++ b/trunk/net/ipv6/ndisc.c @@ -1413,6 +1413,13 @@ void ndisc_send_redirect(struct sk_buff *skb, struct neighbour *neigh, return; } + if (!ipv6_addr_equal(&skb->nh.ipv6h->daddr, target) && + !(ipv6_addr_type(target) & IPV6_ADDR_LINKLOCAL)) { + ND_PRINTK2(KERN_WARNING + "ICMPv6 Redirect: target address is not link-local.\n"); + return; + } + ndisc_flow_init(&fl, NDISC_REDIRECT, &saddr_buf, &skb->nh.ipv6h->saddr, dev->ifindex);