]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: discard overlapping IPv6 fragment
authorNicolas Dichtel <nicolas.dichtel@6wind.com>
Fri, 3 Sep 2010 05:13:07 +0000 (05:13 +0000)
committerDavid S. Miller <davem@davemloft.net>
Tue, 7 Sep 2010 20:57:21 +0000 (13:57 -0700)
commit643571b59f9b6a12733db02fd02f962ba710303b
tree3a73d6913b51dc91114443c5af2a1d44c59735c6
parent6ab9be1c531e016532ca5f9c1d33a9ae836ba00b
netfilter: discard overlapping IPv6 fragment

RFC5722 prohibits reassembling IPv6 fragments when some data overlaps.

Bug spotted by Zhang Zuotao <zuotao.zhang@6wind.com>.

Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/netfilter/nf_conntrack_reasm.c