diff options
| author | Davide Caratti <[email protected]> | 2021-02-12 16:12:25 +0100 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2021-02-12 17:03:51 -0800 |
| commit | d2126838050ccd1dadf310ffb78b2204f3b032b9 (patch) | |
| tree | 61659bf5587ef25f01130ec875a2a975b587ec3e /scripts/gcc-plugins | |
| parent | 39935dccb21c60f9bbf1bb72d22ab6fd14ae7705 (diff) | |
flow_dissector: fix TTL and TOS dissection on IPv4 fragments
the following command:
# tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \
$tcflags dst_ip 192.0.2.2 ip_ttl 63 action drop
doesn't drop all IPv4 packets that match the configured TTL / destination
address. In particular, if "fragment offset" or "more fragments" have non
zero value in the IPv4 header, setting of FLOW_DISSECTOR_KEY_IP is simply
ignored. Fix this dissecting IPv4 TTL and TOS before fragment info; while
at it, add a selftest for tc flower's match on 'ip_ttl' that verifies the
correct behavior.
Fixes: 518d8a2e9bad ("net/flow_dissector: add support for dissection of misc ip header fields")
Reported-by: Shuang Li <[email protected]>
Signed-off-by: Davide Caratti <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'scripts/gcc-plugins')
0 files changed, 0 insertions, 0 deletions