summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHerbert Xu <herbert@gondor.apana.org.au>2007-02-14 09:39:09 +0100
committerAdrian Bunk <bunk@stusta.de>2007-02-14 09:39:09 +0100
commit587d7ce100bcfa2eabbc6664122d575acac2fb83 (patch)
tree3d1b2d4bb69346fb53791d32faad66806ec03f1b
parentb455317374ac03ebc895723774d7b6359355a422 (diff)
downloadlinux-stable-587d7ce100bcfa2eabbc6664122d575acac2fb83.tar.gz
linux-stable-587d7ce100bcfa2eabbc6664122d575acac2fb83.tar.bz2
linux-stable-587d7ce100bcfa2eabbc6664122d575acac2fb83.zip
[NETFILTER]: Clear GSO bits for TCP reset packet
The TCP reset packet is copied from the original. This includes all the GSO bits which do not apply to the new packet. So we should clear those bits. Spotted by Patrick McHardy. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Adrian Bunk <bunk@stusta.de>
-rw-r--r--net/ipv4/netfilter/ipt_REJECT.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/net/ipv4/netfilter/ipt_REJECT.c b/net/ipv4/netfilter/ipt_REJECT.c
index 3eb47aae78c5..e85ef898faac 100644
--- a/net/ipv4/netfilter/ipt_REJECT.c
+++ b/net/ipv4/netfilter/ipt_REJECT.c
@@ -159,6 +159,9 @@ static void send_reset(struct sk_buff *oldskb, int hook)
nskb->nf_bridge = NULL;
#endif
+ skb_shinfo(nskb)->tso_size = 0;
+ skb_shinfo(nskb)->tso_segs = 0;
+
tcph = (struct tcphdr *)((u_int32_t*)nskb->nh.iph + nskb->nh.iph->ihl);
/* Swap source and dest */