diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2007-02-13 20:32:58 (GMT) |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2007-02-13 20:32:58 (GMT) |
| commit | bbf4a6bc8c4d59a0a9033fc2cb96ec03430c96e4 (patch) | |
| tree | 7e1e3dec020ff2eab0b3683be07f87aac3fea915 | |
| parent | 65610fbab35b0570df4a9d0e77e111f85606b312 (diff) | |
| download | linux-bbf4a6bc8c4d59a0a9033fc2cb96ec03430c96e4.tar.xz | |
[NETFILTER]: Clear GSO bits for TCP reset packet
The TCP reset packet is copied from the original. This
includes all the GSO bits which do not apply to the new
packet. So we should clear those bits.
Spotted by Patrick McHardy.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
| -rw-r--r-- | net/ipv4/netfilter/ipt_REJECT.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/net/ipv4/netfilter/ipt_REJECT.c b/net/ipv4/netfilter/ipt_REJECT.c index a9eb363..80f739e 100644 --- a/net/ipv4/netfilter/ipt_REJECT.c +++ b/net/ipv4/netfilter/ipt_REJECT.c @@ -80,6 +80,10 @@ static void send_reset(struct sk_buff *oldskb, int hook) nskb->mark = 0; skb_init_secmark(nskb); + skb_shinfo(nskb)->gso_size = 0; + skb_shinfo(nskb)->gso_segs = 0; + skb_shinfo(nskb)->gso_type = 0; + tcph = (struct tcphdr *)((u_int32_t*)nskb->nh.iph + nskb->nh.iph->ihl); /* Swap source and dest */ |