From: Patrick McHardy Date: Fri, 19 Feb 2010 17:18:37 +0000 (+0100) Subject: netfilter: nf_conntrack_reasm: properly handle packets fragmented into a single fragment X-Git-Tag: v2.6.34-rc1~233^2~90^2~7 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9e2dcf72023d1447f09c47d77c99b0c49659e5ce;p=pandora-kernel.git netfilter: nf_conntrack_reasm: properly handle packets fragmented into a single fragment When an ICMPV6_PKT_TOOBIG message is received with a MTU below 1280, all further packets include a fragment header. Unlike regular defragmentation, conntrack also needs to "reassemble" those fragments in order to obtain a packet without the fragment header for connection tracking. Currently nf_conntrack_reasm checks whether a fragment has either IP6_MF set or an offset != 0, which makes it ignore those fragments. Remove the invalid check and make reassembly handle fragment queues containing only a single fragment. Reported-and-tested-by: Ulrich Weber Signed-off-by: Patrick McHardy --- Reading git-diff-tree failed