Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b396966c authored by Phil Oester's avatar Phil Oester Committed by Pablo Neira Ayuso
Browse files

netfilter: xt_TCPMSS: Fix missing fragmentation handling 



Similar to commit bc6bcb59 ("netfilter: xt_TCPOPTSTRIP: fix
possible mangling beyond packet boundary"), add safe fragment
handling to xt_TCPMSS.

Signed-off-by: default avatarPhil Oester <kernel@linuxace.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 70d19f80

net/netfilter/xt_TCPMSS.c

+4 −0
Original line number Diff line number Diff line
@@ -57,6 +57,10 @@ tcpmss_mangle_packet(struct sk_buff *skb, 
	u16 newmss;

	u8 *opt;



	/* This is a fragment, no TCP header is available */

	if (par->fragoff != 0)

		return XT_CONTINUE;



	if (!skb_make_writable(skb, skb->len))

		return -1;