commit 38db976514ff2ad12d207a927219762eab179882
author Hugo Benichi <hugobenichi@google.com> Tue Jul 12 15:08:50 2016 +0900
committer Hugo Benichi <hugobenichi@google.com> Thu Jul 14 23:36:53 2016 +0900
tree 0174a9a4639a82b64935bc878c1f70a272f3fc95
parent 4c7b339411bd68d5f2768e10078bd83c7a50a0fb

APF: filter unwanted ARP replies

This patch adds APF filtering of ARP replies for interfaces with APF.

- when the interface has no IPv4 address, broadcast ARP replies with a
  0.0.0.0 target ip are dropped (GARP), ARP requests with a 0.0.0.0
  target ip are dropped.

- when the interface has an IPv4 address, broadcast ARP replies to a
  different ip are dropped (including GARPs to 0.0.0.0), ARP requests to
  a different ip are dropped.

Bug: 29404209
Bug: 30080487
Change-Id: I82613eb865c7f38b6260997fe2caf2aff382ad78