]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
authorXin Long <lucien.xin@gmail.com>
Wed, 13 Mar 2019 08:33:29 +0000 (16:33 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 18 Mar 2019 15:21:54 +0000 (16:21 +0100)
commit3458fa689dcfac9c2870b644948dfcd67e364d65
tree1d44f8ea9b079e674837793e01c6cab131b3a67f
parent7853d94778864ec25e36be41610bb1e5a1a680f9
netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING

Since Commit 147e13431eea ("ipv4: set transport header earlier"),
skb->transport_header has been always set before entering INET
netfilter. This patch is to set skb->transport_header for bridge
before entering INET netfilter by bridge-nf-call-iptables.

It also fixes an issue that sctp_error() couldn't compute a right
csum due to unset skb->transport_header.

Fixes: 17a2953f0995 ("net: sctp: fix and consolidate SCTP checksumming code")
Reported-by: Li Shuang <shuali@redhat.com>
Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/br_netfilter_hooks.c
net/bridge/br_netfilter_ipv6.c