]> err.no Git - linux-2.6/commit
xfrm: fix fragmentation for ipv4 xfrm tunnel
authorSteffen Klassert <steffen.klassert@secunet.com>
Tue, 17 Jun 2008 23:37:13 +0000 (16:37 -0700)
committerDavid S. Miller <davem@davemloft.net>
Tue, 17 Jun 2008 23:38:23 +0000 (16:38 -0700)
commitfe833fca2eac6b3d3ad5e35f44ad4638362f1da8
tree5069eb9f5b9c9f881fb42dc0e2c347ef7b45036f
parenta56b8f81580761c65e4d8d0c04ac1cb7a788bdf1
xfrm: fix fragmentation for ipv4 xfrm tunnel

When generating the ip header for the transformed packet we just copy
the frag_off field of the ip header from the original packet to the ip
header of the new generated packet. If we receive a packet as a chain
of fragments, all but the last of the new generated packets have the
IP_MF flag set. We have to mask the frag_off field to only keep the
IP_DF flag from the original packet. This got lost with git commit
36cf9acf93e8561d9faec24849e57688a81eb9c5 ("[IPSEC]: Separate
inner/outer mode processing on output")

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/xfrm4_mode_tunnel.c