lkml.org 
[lkml]   [2018]   [Apr]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH AUTOSEL for 4.9 267/293] netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure
    Date
    From: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>

    [ Upstream commit ea23d5e3bf340e413b8e05c13da233c99c64142b ]

    Failures were seen in ICMPv6 fragmentation timeout tests if they were
    run after the RFC2460 failure tests. Kernel was not sending out the
    ICMPv6 fragment reassembly time exceeded packet after the fragmentation
    reassembly timeout of 1 minute had elapsed.

    This happened because the frag queue was not released if an error in
    IPv6 fragmentation header was detected by RFC2460.

    Fixes: 83f1999caeb1 ("netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460")
    Signed-off-by: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>
    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
    Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
    ---
    net/ipv6/netfilter/nf_conntrack_reasm.c | 1 +
    1 file changed, 1 insertion(+)

    diff --git a/net/ipv6/netfilter/nf_conntrack_reasm.c b/net/ipv6/netfilter/nf_conntrack_reasm.c
    index 5edfe66a3d7a..64ec23388450 100644
    --- a/net/ipv6/netfilter/nf_conntrack_reasm.c
    +++ b/net/ipv6/netfilter/nf_conntrack_reasm.c
    @@ -263,6 +263,7 @@ static int nf_ct_frag6_queue(struct frag_queue *fq, struct sk_buff *skb,
    * this case. -DaveM
    */
    pr_debug("end of fragment not rounded to 8 bytes.\n");
    + inet_frag_kill(&fq->q, &nf_frags);
    return -EPROTO;
    }
    if (end > fq->q.len) {
    --
    2.15.1
    \
     
     \ /
      Last update: 2018-04-09 03:47    [W:4.106 / U:0.008 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site