diff options
| author |   Andy Zhou <azhou@nicira.com> | 2015-05-15 14:15:37 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2015-05-19 00:15:39 -0400 |
| commit | 49d16b23cd1e61c028ee088c5a64e9ac6a9c6147 (patch) | |
| tree | 446c416b396c4561bd5616f6fba2ef52c43c8d06 /lib/dec_and_lock.c | |
| parent | IPv4: skip ICMP for bridge contrack users when defrag expires (diff) | |
| download | linux-dev-49d16b23cd1e61c028ee088c5a64e9ac6a9c6147.tar.xz linux-dev-49d16b23cd1e61c028ee088c5a64e9ac6a9c6147.zip | |
bridge_netfilter: No ICMP packet on IPv4 fragmentation error
When bridge netfilter re-fragments an IP packet for output, all
packets that can not be re-fragmented to their original input size
should be silently discarded.
However, current bridge netfilter output path generates an ICMP packet
with 'size exceeded MTU' message for such packets, this is a bug.
This patch refactors the ip_fragment() API to allow two separate
use cases. The bridge netfilter user case will not
send ICMP, the routing output will, as before.
Signed-off-by: Andy Zhou <azhou@nicira.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'lib/dec_and_lock.c')
0 files changed, 0 insertions, 0 deletions