search for: nf_ct_frag6_queu

Displaying 1 result from an estimated 1 matches for "nf_ct_frag6_queu".

Did you mean: nf_ct_frag6_queue
2014 Nov 11
0
[Bug 987] New: nf_conntrack_reasm.c : Silent discard of overlapping fragments is not silent
...eporter: netfilter at kiffie.de When conntrack collects IPv6 packet fragments and encounters an overlapping (or a replayed identical) fragment, then the overlapping fragment gets forwarded and is not silently dropped with all the others from the fragment queue. Possible explanation: The function nf_ct_frag6_queue contains checks for overlapping fragments: /* Check for overlap with preceding fragment. */ if (prev && (NFCT_FRAG6_CB(prev)->offset + prev->len) > offset) goto discard_fq; /* Look for overlap with succeeding segment. */ if (next && NFCT_FRAG6_CB(next)->offset...