From: Steffen Klassert Date: Tue, 17 Jun 2008 23:37:13 +0000 (-0700) Subject: xfrm: fix fragmentation for ipv4 xfrm tunnel X-Git-Tag: v2.6.26-rc7~20^2~5 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fe833fca2eac6b3d3ad5e35f44ad4638362f1da8;p=pandora-kernel.git xfrm: fix fragmentation for ipv4 xfrm tunnel When generating the ip header for the transformed packet we just copy the frag_off field of the ip header from the original packet to the ip header of the new generated packet. If we receive a packet as a chain of fragments, all but the last of the new generated packets have the IP_MF flag set. We have to mask the frag_off field to only keep the IP_DF flag from the original packet. This got lost with git commit 36cf9acf93e8561d9faec24849e57688a81eb9c5 ("[IPSEC]: Separate inner/outer mode processing on output") Signed-off-by: Steffen Klassert Acked-by: Herbert Xu Signed-off-by: David S. Miller --- Reading git-diff-tree failed