]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_ct_sane: remove pseudo skb linearization
authorFlorian Westphal <fw@strlen.de>
Tue, 9 Aug 2022 13:16:32 +0000 (15:16 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 11 Aug 2022 14:50:25 +0000 (16:50 +0200)
commitc4b05d83facae7d92391369a4f97910fd5e6abb6
tree7044005820acce1b7f596c8722e8042adfe5b8e6
parent7f1b8cd466e682812380fd984c3ba7356eb317c6
netfilter: nf_ct_sane: remove pseudo skb linearization

For historical reason this code performs pseudo linearization of skbs
via skb_header_pointer and a global 64k buffer.

With arrival of BIG TCP, packets generated by TCP stack can exceed 64kb.

Rewrite this to only extract the needed header data.  This also allows
to get rid of the locking.

Fixes: 0925d890ea69 ("net: allow gso_max_size to exceed 65536")
Fixes: 13783a4e60e6 ("net: allow gro_max_size to exceed 65536")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_sane.c