Commit 9b83e031 authored Apr 28, 2017 by Steffen Klassert Committed by David S. Miller Apr 28, 2017

ipv4: Don't pass IP fragments to upper layer GRO handlers.



Upper layer GRO handlers can not handle IP fragments, so
exit GRO processing in this case.

This fixes ESP GRO because the packet must be reassembled
before we can decapsulate, otherwise we get authentication
failures.

It also aligns IPv4 to IPv6 where packets with fragmentation
headers are not passed to upper layer GRO handlers.

Fixes: 7785bba2 ("esp: Add a software GRO codepath")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 504926df

net/ipv4/af_inet.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -1343,6 +1343,9 @@ struct sk_buff inet_gro_receive(struct sk_buff head, struct sk_buff *skb)
		if ((u8 )iph != 0x45)
		goto out_unlock;

		if (ip_is_fragment(iph))
		goto out_unlock;

		if (unlikely(ip_fast_csum((u8 *)iph, 5)))
		goto out_unlock;

Admin message