releases/2.6.20.2/clear-tcp-segmentation-offload-state-in-ipt_reject.patch

   1 From stable-bounces@linux.kernel.org Tue Feb 13 18:14:08 2007
   2 From: Herbert Xu <herbert@gondor.apana.org.au>
   3 Date: Tue, 13 Feb 2007 18:12:38 -0800 (PST)
   4 Subject: Clear TCP segmentation offload state in ipt_REJECT
   5 To: stable@kernel.org
   6 Cc: bunk@stusta.de
   7 Message-ID: <20070213.181238.74561510.davem@davemloft.net>
   8
   9 From: Herbert Xu <herbert@gondor.apana.org.au>
  10
  11 [NETFILTER]: Clear GSO bits for TCP reset packet
  12
  13 The TCP reset packet is copied from the original.  This
  14 includes all the GSO bits which do not apply to the new
  15 packet.  So we should clear those bits.
  16
  17 Spotted by Patrick McHardy.
  18
  19 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
  20 Signed-off-by: David S. Miller <davem@davemloft.net>
  21 Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  22
  23 ---
  24  net/ipv4/netfilter/ipt_REJECT.c |    4 ++++
  25  1 file changed, 4 insertions(+)
  26
  27 --- linux-2.6.20.1.orig/net/ipv4/netfilter/ipt_REJECT.c
  28 +++ linux-2.6.20.1/net/ipv4/netfilter/ipt_REJECT.c
  29 @@ -79,6 +79,10 @@ static void send_reset(struct sk_buff *o
  30         nskb->mark = 0;
  31         skb_init_secmark(nskb);
  32
  33 +       skb_shinfo(nskb)->gso_size = 0;
  34 +       skb_shinfo(nskb)->gso_segs = 0;
  35 +       skb_shinfo(nskb)->gso_type = 0;
  36 +
  37         tcph = (struct tcphdr *)((u_int32_t*)nskb->nh.iph + nskb->nh.iph->ihl);
  38
  39         /* Swap source and dest */