diff options
| author |  Florian Westphal <fw@strlen.de>
| 2022-08-09 15:16:32 +0200 |
|---|---|---|
| committer |  Pablo Neira Ayuso <pablo@netfilter.org>
| 2022-08-11 16:50:25 +0200 |
| commit | a664375da76c6da8f83dc7997e43c568e1eb9a6a (patch) | |
| tree | 7044005820acce1b7f596c8722e8042adfe5b8e6 /samples | |
| parent | netfilter: nf_tables: possible module reference underflow in error path (diff) | |
| download | linux-a664375da76c6da8f83dc7997e43c568e1eb9a6a.tar.gz linux-a664375da76c6da8f83dc7997e43c568e1eb9a6a.tar.bz2 linux-a664375da76c6da8f83dc7997e43c568e1eb9a6a.zip | |
netfilter: nf_ct_sane: remove pseudo skb linearization
For historical reason this code performs pseudo linearization of skbs
via skb_header_pointer and a global 64k buffer.
With arrival of BIG TCP, packets generated by TCP stack can exceed 64kb.
Rewrite this to only extract the needed header data. This also allows
to get rid of the locking.
Fixes: 7c4e983c4f3c ("net: allow gso_max_size to exceed 65536")
Fixes: 0fe79f28bfaf ("net: allow gro_max_size to exceed 65536")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'samples')
0 files changed, 0 insertions, 0 deletions