]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_ct_reasm: fix conntrack reassembly expire code
authorHaibo Xi <haibbo@gmail.com>
Thu, 6 Dec 2012 23:42:17 +0000 (23:42 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 16 Dec 2012 22:41:25 +0000 (23:41 +0100)
commit205d533c9b2a10c2000652d03e62c42061502cdd
tree2e5dc412ebebf1cc54ad434017db90cb5aa6a2cf
parent4f15962a2aafae6a1c1eca3c14d247399d6770ee
netfilter: nf_ct_reasm: fix conntrack reassembly expire code

Commit 86e6247a42a5 (ipv6: unify conntrack reassembly expire
code with standard one) use the standard IPv6 reassembly
code(ip6_expire_frag_queue) to handle conntrack reassembly expire.

In ip6_expire_frag_queue, it invoke dev_get_by_index_rcu to get
which device received this expired packet.so we must save ifindex
when NF_conntrack get this packet.

With this patch applied, I can see ICMP Time Exceeded sent
from the receiver when the sender sent out 1/2 fragmented
IPv6 packet.

Signed-off-by: Haibo Xi <haibbo@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv6/netfilter/nf_conntrack_reasm.c