Message ID | 20100713102036.2835.36872.sendpatchset@danny.redhat |
---|---|
State | RFC, archived |
Delegated to: | David Miller |
Headers | show |
diff --git a/net/netfilter/core.c b/net/netfilter/core.c index 78b505d..cc04549 100644 --- a/net/netfilter/core.c +++ b/net/netfilter/core.c @@ -176,9 +176,12 @@ next_hook: if (verdict == NF_ACCEPT || verdict == NF_STOP) { ret = 1; } else if (verdict == NF_DROP) { +drop: kfree_skb(skb); ret = -EPERM; } else if ((verdict & NF_VERDICT_MASK) == NF_QUEUE) { + if (skb_emergency(skb)) + goto drop; if (!nf_queue(skb, elem, pf, hook, indev, outdev, okfn, verdict >> NF_VERDICT_BITS)) goto next_hook;