projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bafd4bd) | patch
ipsec: Don't update the pmtu on ICMPV6_DEST_UNREACH
authorSteffen Klassert <steffen.klassert@secunet.com>
Tue, 10 Sep 2013 11:43:09 +0000 (13:43 +0200)
committerSteffen Klassert <steffen.klassert@secunet.com>
Mon, 16 Sep 2013 07:45:32 +0000 (09:45 +0200)
commitb3b2b9e192d5811f91f9cd92aeec489cecabc92e
treef5d068cf99b4ba7d3d650bd35d2fa5c9b2a7bcf6tree | snapshot
parentbafd4bd4dcfa13145db7f951251eef3e10f8c278commit | diff
ipsec: Don't update the pmtu on ICMPV6_DEST_UNREACH

Currently we update the pmtu in the IPsec protocol error handlers
if icmpv6 message type is either ICMPV6_DEST_UNREACH or
ICMPV6_PKT_TOOBIG. Updating the pmtu on ICMPV6_DEST_UNREACH
is wrong in any case, it causes strangely fragmented packets.
Only ICMPV6_PKT_TOOBIG signalizes pmtu discovery, so remove the
ICMPV6_DEST_UNREACH check in the IPsec protocol error handlers.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/ipv6/ah6.c diff | blob | history
net/ipv6/esp6.c diff | blob | history
net/ipv6/ipcomp6.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git