]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: conntrack: fix false CRC32c mismatch using paged skb
authorDavide Caratti <dcaratti@redhat.com>
Thu, 18 May 2017 16:01:43 +0000 (18:01 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 23 May 2017 20:54:14 +0000 (22:54 +0200)
commitd506d7c64a1d0b469d8a0908bb01c2764119e8b4
tree7397ca4a6e3c9d980a8a599b070056f407124296
parentf42662964b5ce5b33de16c3fc84e63bc639e06a8
netfilter: conntrack: fix false CRC32c mismatch using paged skb

sctp_compute_cksum() implementation assumes that at least the SCTP header
is in the linear part of skb: modify conntrack error callback to avoid
false CRC32c mismatch, if the transport header is partially/entirely paged.

Fixes: 8c6e77d0f3a5 ("netfilter: conntrack: validate SCTP crc32c in PREROUTING")
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_proto_sctp.c