projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2db60bb) | patch
netfilter: nft_payload: do not update layer 4 checksum when mangling fragments
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 5 Jan 2022 15:09:57 +0000 (16:09 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 27 Jan 2022 10:03:51 +0000 (11:03 +0100)
commit500193142a20346e7be674a59b674e4c5e8dc1ae
tree4312707859d93526588c90e706b63da8168c2ccetree | snapshot
parent2db60bb564056e87a9985ce866f250b7847efd81commit | diff
netfilter: nft_payload: do not update layer 4 checksum when mangling fragments

[ Upstream commit 4e1860a3863707e8177329c006d10f9e37e097a8 ]

IP fragments do not come with the transport header, hence skip bogus
layer 4 checksum updates.

Fixes: 1814096980bb ("netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields")
Reported-and-tested-by: Steffen Weinreich <steve@weinreich.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_payload.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git