| commit | f3c0eb05e258c6a48c2d1ef2fa71ffb6ff63cd18 | [log] [tgz] |
|---|---|---|
| author | Davide Caratti <dcaratti@redhat.com> | Thu May 18 18:01:43 2017 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Tue May 23 22:54:14 2017 +0200 |
| tree | 7397ca4a6e3c9d980a8a599b070056f407124296 | |
| parent | 6d18c732b95c0a9d35e9f978b4438bba15412284 [diff] |
netfilter: conntrack: fix false CRC32c mismatch using paged skb
sctp_compute_cksum() implementation assumes that at least the SCTP header
is in the linear part of skb: modify conntrack error callback to avoid
false CRC32c mismatch, if the transport header is partially/entirely paged.
Fixes: cf6e007eef83 ("netfilter: conntrack: validate SCTP crc32c in PREROUTING")
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>