diff options
| author | Hannes Frederic Sowa <hannes@stressinduktion.org> | 2013-08-16 13:30:07 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2013-08-20 00:11:24 -0700 |
| commit | f46078cfcd77fa5165bf849f5e568a7ac5fa569c (patch) | |
| tree | 2a0156752e30066c8e52a74e361f0067d6d7d21b /include/linux/ipv6.h | |
| parent | 4b08a8f1bd8cb4541c93ec170027b4d0782dab52 (diff) | |
| download | lwn-f46078cfcd77fa5165bf849f5e568a7ac5fa569c.tar.gz lwn-f46078cfcd77fa5165bf849f5e568a7ac5fa569c.zip | |
ipv6: drop packets with multiple fragmentation headers
It is not allowed for an ipv6 packet to contain multiple fragmentation
headers. So discard packets which were already reassembled by
fragmentation logic and send back a parameter problem icmp.
The updates for RFC 6980 will come in later, I have to do a bit more
research here.
Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/linux/ipv6.h')
| -rw-r--r-- | include/linux/ipv6.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/linux/ipv6.h b/include/linux/ipv6.h index 850e95bc766c..b8b7dc755752 100644 --- a/include/linux/ipv6.h +++ b/include/linux/ipv6.h @@ -101,6 +101,7 @@ struct inet6_skb_parm { #define IP6SKB_FORWARDED 2 #define IP6SKB_REROUTED 4 #define IP6SKB_ROUTERALERT 8 +#define IP6SKB_FRAGMENTED 16 }; #define IP6CB(skb) ((struct inet6_skb_parm*)((skb)->cb)) |