From: Andy Zhou <azhou@nicira.com>
Date: Fri, 15 May 2015 21:15:37 +0000 (-0700)
Subject: bridge_netfilter: No ICMP packet on IPv4 fragmentation error
X-Git-Tag: omap-for-v4.2/fixes-rc1^2~134^2~260^2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=49d16b23cd1e61c028ee088c5a64e9ac6a9c6147;p=pandora-kernel.git

bridge_netfilter: No ICMP packet on IPv4 fragmentation error

When bridge netfilter re-fragments an IP packet for output, all
packets that can not be re-fragmented to their original input size
should be silently discarded.

However, current bridge netfilter output path generates an ICMP packet
with 'size exceeded MTU' message for such packets, this is a bug.

This patch refactors the ip_fragment() API to allow two separate
use cases. The bridge netfilter user case will not
send ICMP, the routing output will, as before.

Signed-off-by: Andy Zhou <azhou@nicira.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed