Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit dd5968e8 authored by Subash Abhinov Kasiviswanathan's avatar Subash Abhinov Kasiviswanathan Committed by Greg Kroah-Hartman
Browse files

netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure 



[ Upstream commit ea23d5e3bf340e413b8e05c13da233c99c64142b ]

Failures were seen in ICMPv6 fragmentation timeout tests if they were
run after the RFC2460 failure tests. Kernel was not sending out the
ICMPv6 fragment reassembly time exceeded packet after the fragmentation
reassembly timeout of 1 minute had elapsed.

This happened because the frag queue was not released if an error in
IPv6 fragmentation header was detected by RFC2460.

Fixes: 83f1999caeb1 ("netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460")
Signed-off-by: default avatarSubash Abhinov Kasiviswanathan <subashab@codeaurora.org>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarSasha Levin <alexander.levin@microsoft.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent e7bce211

net/ipv6/netfilter/nf_conntrack_reasm.c

+1 −0
Original line number Diff line number Diff line
@@ -263,6 +263,7 @@ static int nf_ct_frag6_queue(struct frag_queue *fq, struct sk_buff *skb, 
			 * this case. -DaveM

			 */

			pr_debug("end of fragment not rounded to 8 bytes.\n");

			inet_frag_kill(&fq->q, &nf_frags);

			return -EPROTO;

		}

		if (end > fq->q.len) {