netfilter: discard overlapping IPv6 fragment
authorNicolas Dichtel <nicolas.dichtel@6wind.com>
Fri, 3 Sep 2010 05:13:07 +0000 (05:13 +0000)
committerDavid S. Miller <davem@davemloft.net>
Tue, 7 Sep 2010 20:57:21 +0000 (13:57 -0700)
commit1ee89bd0fe72e381c8e4ef887d53c19c8adc6c93
tree3a73d6913b51dc91114443c5af2a1d44c59735c6
parent70789d7052239992824628db8133de08dc78e593
netfilter: discard overlapping IPv6 fragment

RFC5722 prohibits reassembling IPv6 fragments when some data overlaps.

Bug spotted by Zhang Zuotao <zuotao.zhang@6wind.com>.

Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/netfilter/nf_conntrack_reasm.c