Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751082AbYLAI7U (ORCPT ); Mon, 1 Dec 2008 03:59:20 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1753287AbYLAI66 (ORCPT ); Mon, 1 Dec 2008 03:58:58 -0500 Received: from mtagate4.de.ibm.com ([195.212.29.153]:46685 "EHLO mtagate4.de.ibm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753070AbYLAI65 (ORCPT ); Mon, 1 Dec 2008 03:58:57 -0500 Message-ID: <4933A74F.3050809@de.ibm.com> Date: Mon, 01 Dec 2008 09:58:55 +0100 From: Jan-Bernd Themann User-Agent: Thunderbird 2.0.0.16 (X11/20080715) MIME-Version: 1.0 To: David Miller CC: netdev@vger.kernel.org, linux-kernel , tklein@de.ibm.com, Christoph Raisch , jb.billaud@gmail.com, hering2@de.ibm.com Subject: [PATCH] lro: IP fragment checking Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 898 Lines: 40 This patch prevents that ip fragmented TCP packets are considered vaild for aggregation Regards, Jan-Bernd --- net/ipv4/inet_lro.c | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/net/ipv4/inet_lro.c b/net/ipv4/inet_lro.c index cfd034a..1f9159d 100644 --- a/net/ipv4/inet_lro.c +++ b/net/ipv4/inet_lro.c @@ -64,6 +64,9 @@ static int lro_tcp_ip_check(struct iphdr *iph, struct tcphdr *tcph, if (iph->ihl != IPH_LEN_WO_OPTIONS) return -1; + if (iph->frag_off & IP_MF) + return -1; + if (tcph->cwr || tcph->ece || tcph->urg || !tcph->ack || tcph->rst || tcph->syn || tcph->fin) return -1; -- 1.5.5 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/