IPv4: skip ICMP for bridge contrack users when defrag expires
authorAndy Zhou <azhou@nicira.com>
Fri, 15 May 2015 21:15:36 +0000 (14:15 -0700)
committerDavid S. Miller <davem@davemloft.net>
Tue, 19 May 2015 04:15:27 +0000 (00:15 -0400)
users in [IP_DEFRAG_CONNTRACK_BRIDGE_IN, __IP_DEFRAG_CONNTRACK_BR_IN]
should not ICMP message also.

Reported-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Andy Zhou <azhou@nicira.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ip_fragment.c

index 83424f1742b84481f2e3b0876fad8089d5d1d3d6..47fa64ee82b150a03288417d871efa3e9d44490e 100644 (file)
@@ -177,7 +177,9 @@ static bool frag_expire_skip_icmp(u32 user)
 {
        return user == IP_DEFRAG_AF_PACKET ||
               ip_defrag_user_in_between(user, IP_DEFRAG_CONNTRACK_IN,
-                                        __IP_DEFRAG_CONNTRACK_IN_END);
+                                        __IP_DEFRAG_CONNTRACK_IN_END) ||
+              ip_defrag_user_in_between(user, IP_DEFRAG_CONNTRACK_BRIDGE_IN,
+                                        __IP_DEFRAG_CONNTRACK_BRIDGE_IN);
 }
 
 /*