commit | f3c0eb05e258c6a48c2d1ef2fa71ffb6ff63cd18 | [log] [tgz] |
---|---|---|
author | Davide Caratti <dcaratti@redhat.com> | Thu May 18 18:01:43 2017 +0200 |
committer | Pablo Neira Ayuso <pablo@netfilter.org> | Tue May 23 22:54:14 2017 +0200 |
tree | 7397ca4a6e3c9d980a8a599b070056f407124296 | |
parent | 6d18c732b95c0a9d35e9f978b4438bba15412284 [diff] |
netfilter: conntrack: fix false CRC32c mismatch using paged skb sctp_compute_cksum() implementation assumes that at least the SCTP header is in the linear part of skb: modify conntrack error callback to avoid false CRC32c mismatch, if the transport header is partially/entirely paged. Fixes: cf6e007eef83 ("netfilter: conntrack: validate SCTP crc32c in PREROUTING") Signed-off-by: Davide Caratti <dcaratti@redhat.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>