Steffen Klassert fe833fca2e xfrm: fix fragmentation for ipv4 xfrm tunnel
When generating the ip header for the transformed packet we just copy
the frag_off field of the ip header from the original packet to the ip
header of the new generated packet. If we receive a packet as a chain
of fragments, all but the last of the new generated packets have the
IP_MF flag set. We have to mask the frag_off field to only keep the
IP_DF flag from the original packet. This got lost with git commit
36cf9acf93e8561d9faec24849e57688a81eb9c5 ("[IPSEC]: Separate
inner/outer mode processing on output")

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-06-17 16:38:23 -07:00
..
2008-01-28 14:58:15 -08:00
2008-01-08 23:30:18 -08:00
2008-05-21 17:47:54 -07:00
2008-05-21 17:47:54 -07:00
2008-03-06 16:22:02 -08:00
2007-04-25 22:28:20 -07:00
2008-05-01 08:03:58 -07:00
2008-06-05 04:02:38 +09:00
2008-03-26 16:51:09 -07:00
2008-03-26 16:51:09 -07:00