Peter Oskolkov d476186a74 net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c ...

[ Upstream commit 997dd96471 ]

Currently, IPv6 defragmentation code drops non-last fragments that
are smaller than 1280 bytes: see
commit 0ed4229b08 ("ipv6: defrag: drop non-last frags smaller than min mtu")

This behavior is not specified in IPv6 RFCs and appears to break
compatibility with some IPv6 implemenations, as reported here:
https://www.spinics.net/lists/netdev/msg543846.html

This patch re-uses common IP defragmentation queueing and reassembly
code in IP6 defragmentation in nf_conntrack, removing the 1280 byte
restriction.

Signed-off-by: Peter Oskolkov <posk@google.com>
Reported-by: Tom Herbert <tom@herbertland.com>
Cc: Eric Dumazet <edumazet@google.com>
Cc: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-05-02 09:32:07 +02:00

..

ila

ila_xlat: add missing hash secret initialization

2017-06-24 07:11:12 +02:00

netfilter

net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c

2019-05-02 09:32:07 +02:00

addrconf_core.c

…

addrconf.c

net: fix IPv6 prefix route residue

2019-02-23 09:05:58 +01:00

addrlabel.c

…

af_inet6.c

ipv6: Consider sk_bound_dev_if when binding a socket to an address

2019-02-06 17:33:26 +01:00

ah6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:48:31 +02:00

anycast.c

…

calipso.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-08-24 13:12:36 +02:00

datagram.c

ip: on queued skb use skb_header_pointer instead of pskb_may_pull

2019-01-23 08:10:54 +01:00

esp6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:48:31 +02:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-08-24 13:12:36 +02:00

fib6_rules.c

ipv6: Do not leak throw route references

2017-07-05 14:40:16 +02:00

fou6.c

…

icmp.c

…

inet6_connection_sock.c

…

inet6_hashtables.c

…

ip6_checksum.c

net: udp: fix handling of CHECKSUM_COMPLETE packets

2018-11-10 07:42:58 -08:00

ip6_fib.c

ipv6: fix typo in fib6_net_exit()

2017-09-20 08:19:56 +02:00

ip6_flowlabel.c

ipv6: flowlabel: do not leave opt->tot_len with garbage

2017-11-18 11:22:22 +01:00

ip6_gre.c

ip6_gre: better validate user provided tunnel names

2018-04-13 19:48:35 +02:00

ip6_icmp.c

…

ip6_input.c

…

ip6_offload.c

gso_segment: Reset skb->mac_len after modifying network header

2018-09-29 03:07:32 -07:00

ip6_offload.h

…

ip6_output.c

ipv6: Fix dangling pointer when ipv6 fragment

2019-04-17 08:36:44 +02:00

ip6_tunnel.c

ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type

2019-04-17 08:36:46 +02:00

ip6_udp_tunnel.c

ipv6: explicitly initialize udp6_addr in udp_sock_create6()

2019-01-09 16:16:40 +01:00

ip6_vti.c

ipv6: tunnels: fix two use-after-free

2019-01-09 16:16:40 +01:00

ip6mr.c

ip6mr: Do not call __IP6_INC_STATS() from preemptible context

2019-03-13 14:04:52 -07:00

ipcomp6.c

…

ipv6_sockglue.c

ipv6: make ipv6_renew_options() interrupt/kernel safe

2018-08-24 13:12:36 +02:00

Kconfig

…

Makefile

…

mcast_snoop.c

…

mcast.c

ipv6: mcast: fix a use-after-free in inet6_mc_check

2018-11-10 07:42:57 -08:00

mip6.c

…

ndisc.c

ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called

2018-11-10 07:42:57 -08:00

netfilter.c

…

output_core.c

ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt()

2017-09-20 08:19:52 +02:00

ping.c

net: ping: do not abuse udp_poll()

2017-06-14 15:05:52 +02:00

proc.c

inet: frags: break the 2GB limit for frags storage

2018-10-18 09:13:24 +02:00

protocol.c

…

raw.c

ipv6: take rcu lock in rawv6_send_hdrinc()

2018-10-18 09:13:21 +02:00

reassembly.c

net: IP6 defrag: use rbtrees for IPv6 defrag

2019-05-02 09:32:06 +02:00

route.c

net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255

2019-03-19 13:14:09 +01:00

sit.c

ipv6: sit: reset ip header pointer in ipip6_rcv

2019-04-17 08:36:44 +02:00

syncookies.c

ipv4: ipv6: initialize treq->txhash in cookie_v[46]_check()

2017-08-11 08:49:32 -07:00

sysctl_net_ipv6.c

…

tcp_ipv6.c

tcp: do not use ipv6 header for ipv4 flow

2019-04-03 06:24:15 +02:00

tcpv6_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 12:55:55 +01:00

tunnel6.c

…

udp_impl.h

…

udp_offload.c

gso: validate gso_type in GSO handlers

2018-01-31 12:55:55 +01:00

udp.c

udpv6: Fix the checksum computation when HW checksum does not apply

2017-10-12 11:51:20 +02:00

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 15:05:51 +02:00

xfrm6_mode_transport.c

ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt()

2017-06-14 15:05:51 +02:00

xfrm6_mode_tunnel.c

…

xfrm6_output.c

xfrm6: call kfree_skb when skb is toobig

2018-11-10 07:42:41 -08:00

xfrm6_policy.c

xfrm6: avoid potential infinite loop in _decode_session6()

2018-06-26 08:08:05 +08:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi

2019-02-12 19:44:56 +01:00