[IPV4]: Safer reassembly
authorHerbert Xu <herbert@gondor.apana.org.au>
Wed, 14 Dec 2005 07:14:27 +0000 (23:14 -0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Tue, 3 Jan 2006 21:10:31 +0000 (13:10 -0800)
commit89cee8b1cbb9dac40c92ef1968aea2b45f82fd18
tree01049841b15a9c2f3f136710382c7e4c11c1b1e5
parentd5228a4f49db32d22a39c653281b527ef371129c
[IPV4]: Safer reassembly

Another spin of Herbert Xu's "safer ip reassembly" patch
for 2.6.16.

(The original patch is here:
http://marc.theaimsgroup.com/?l=linux-netdev&m=112281936522415&w=2
and my only contribution is to have tested it.)

This patch (optionally) does additional checks before accepting IP
fragments, which can greatly reduce the possibility of reassembling
fragments which originated from different IP datagrams.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Arthur Kepner <akepner@sgi.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Documentation/networking/ip-sysctl.txt
include/linux/sysctl.h
include/net/inetpeer.h
include/net/ip.h
net/ipv4/inetpeer.c
net/ipv4/ip_fragment.c
net/ipv4/ip_output.c
net/ipv4/sysctl_net_ipv4.c