diff options
| author |   Herbert Xu <herbert@gondor.apana.org.au> | 2005-12-13 23:14:27 -0800 |
|---|---|---|
| committer |   David S. Miller <davem@sunset.davemloft.net> | 2006-01-03 13:10:31 -0800 |
| commit | 89cee8b1cbb9dac40c92ef1968aea2b45f82fd18 (patch) | |
| tree | 01049841b15a9c2f3f136710382c7e4c11c1b1e5 /net/ipv4/inetpeer.c | |
| parent | [NETFILTER] ebtables: Support nf_log API from ebt_log and ebt_ulog (diff) | |
| download | linux-dev-89cee8b1cbb9dac40c92ef1968aea2b45f82fd18.tar.xz linux-dev-89cee8b1cbb9dac40c92ef1968aea2b45f82fd18.zip | |
[IPV4]: Safer reassembly
Another spin of Herbert Xu's "safer ip reassembly" patch
for 2.6.16.
(The original patch is here:
http://marc.theaimsgroup.com/?l=linux-netdev&m=112281936522415&w=2
and my only contribution is to have tested it.)
This patch (optionally) does additional checks before accepting IP
fragments, which can greatly reduce the possibility of reassembling
fragments which originated from different IP datagrams.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Arthur Kepner <akepner@sgi.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
| -rw-r--r-- | net/ipv4/inetpeer.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/ipv4/inetpeer.c b/net/ipv4/inetpeer.c index 2fc3fd38924f..ce5fe3f74a3d 100644 --- a/net/ipv4/inetpeer.c +++ b/net/ipv4/inetpeer.c @@ -401,6 +401,7 @@ struct inet_peer *inet_getpeer(__u32 daddr, int create) return NULL; n->v4daddr = daddr; atomic_set(&n->refcnt, 1); + atomic_set(&n->rid, 0); n->ip_id_count = secure_ip_id(daddr); n->tcp_ts_stamp = 0; |