Displaying 1 result from an estimated 1 matches for "nf_ct_frag6_queue".
2014 Nov 11
0
[Bug 987] New: nf_conntrack_reasm.c : Silent discard of overlapping fragments is not silent
...eporter: netfilter at kiffie.de
When conntrack collects IPv6 packet fragments and encounters an overlapping (or
a replayed identical) fragment, then the overlapping fragment gets forwarded
and is not silently dropped with all the others from the fragment queue.
Possible explanation:
The function nf_ct_frag6_queue contains checks for overlapping fragments:
/* Check for overlap with preceding fragment. */
if (prev &&
(NFCT_FRAG6_CB(prev)->offset + prev->len) > offset)
goto discard_fq;
/* Look for overlap with succeeding segment. */
if (next && NFCT_FRAG6_CB(next)->offset...