Please sign in to comment.
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
conntrack: Exclude l2 padding in 'conn_key_extract()'.
'conn_key_extract()' in userspace conntrack is including L2 (Ethernet) pad bytes for both L3 and L4 sizes. One problem is any packet with non-zero L2 padding can incorrectly fail L4 checksum validation. This patch fixes conn_key_extract() by ignoring L2 pad bytes. Fixes: a489b16 ("conntrack: New userspace connection tracker.") CC: Daniele Di Proietto <email@example.com> Co-authored-by: Vishal Deep Ajmera <firstname.lastname@example.org> Co-authored-by: Venkatesan Pradeep <email@example.com> Co-authored-by: Nitin Katiyar <firstname.lastname@example.org> Signed-off-by: Vishal Deep Ajmera <email@example.com> Signed-off-by: Venkatesan Pradeep <firstname.lastname@example.org> Signed-off-by: Nitin Katiyar <email@example.com> Signed-off-by: Darrell Ball <firstname.lastname@example.org> Signed-off-by: Ben Pfaff <email@example.com>
- Loading branch information
Showing with 7 additions and 5 deletions.
- +7 −5 lib/conntrack.c