diff options
| author | Dave Johnson | 2017-04-24 15:11:24 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2017-04-25 11:10:38 +0200 |
| commit | 9dd2ab609eef736d5639e0de1bcc2e71e714b28e (patch) | |
| tree | 269ceeff49482d9113feff5b79b5a69e7dfd39ae /.mailmap | |
| parent | netfilter: nft_dynset: continue to next expr if _OP_ADD succeeded (diff) | |
| download | kernel-qcow2-linux-9dd2ab609eef736d5639e0de1bcc2e71e714b28e.tar.gz kernel-qcow2-linux-9dd2ab609eef736d5639e0de1bcc2e71e714b28e.tar.xz kernel-qcow2-linux-9dd2ab609eef736d5639e0de1bcc2e71e714b28e.zip | |
netfilter: Wrong icmp6 checksum for ICMPV6_TIME_EXCEED in reverse SNATv6 path
When recalculating the outer ICMPv6 checksum for a reverse path NATv6
such as ICMPV6_TIME_EXCEED nf_nat_icmpv6_reply_translation() was
accessing data beyond the headlen of the skb for non-linear skb. This
resulted in incorrect ICMPv6 checksum as garbage data was used.
Patch replaces csum_partial() with skb_checksum() which supports
non-linear skbs similar to nf_nat_icmp_reply_translation() from ipv4.
Signed-off-by: Dave Johnson <dave-kernel@centerclick.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to '.mailmap')
0 files changed, 0 insertions, 0 deletions