[NET]: Mark frame diverter for future removal.
The code for frame diverter is unmaintained and has bitrotted. The number of users is very small and the code has lots of problems. If anyone is using it, they maybe exposing themselves to bad packet attacks. Signed-off-by: Stephen Hemminger <shemminger@osdl.org> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
dc36251037
commit
080f22c0dc
2 changed files with 14 additions and 1 deletions
|
@ -281,3 +281,16 @@ Why: The deferred output hooks are a layering violation causing unusual
|
|||
Who: Patrick McHardy <kaber@trash.net>
|
||||
|
||||
---------------------------
|
||||
|
||||
What: frame diverter
|
||||
When: November 2006
|
||||
Why: The frame diverter is included in most distribution kernels, but is
|
||||
broken. It does not correctly handle many things:
|
||||
- IPV6
|
||||
- non-linear skb's
|
||||
- network device RCU on removal
|
||||
- input frames not correctly checked for protocol errors
|
||||
It also adds allocation overhead even if not enabled.
|
||||
It is not clear if anyone is still using it.
|
||||
Who: Stephen Hemminger <shemminger@osdl.org>
|
||||
|
||||
|
|
|
@ -177,7 +177,7 @@ source "net/lapb/Kconfig"
|
|||
|
||||
config NET_DIVERT
|
||||
bool "Frame Diverter (EXPERIMENTAL)"
|
||||
depends on EXPERIMENTAL
|
||||
depends on EXPERIMENTAL && BROKEN
|
||||
---help---
|
||||
The Frame Diverter allows you to divert packets from the
|
||||
network, that are not aimed at the interface receiving it (in
|
||||
|
|
Loading…
Reference in a new issue