|
IPVS parses packets into struct ip_vs_iphdr before scheduling and state
handling. For IPv6, iph.len contains the real transport-header offset
after ipv6_find_hdr() has skipped any extension headers.
TCP and SCTP state handlers still recompute their own transport offsets.
They use sizeof(struct ipv6hdr) for IPv6, so packets with extension
headers make the state machines read the wrong bytes.
Pass the parsed transport offset through the common IPVS state handling
callback, then use it in the TCP and SCTP state lookups.
Changes in v2:
- Pass the parsed transport offset through ip_vs_set_state() and the
protocol callbacks.
- Fix TCP state handling as well as SCTP.
- Avoid reparsing the skb in SCTP state handling.
- Split the common plumbing, TCP fix and SCTP fix into a 3-patch series.
Yizhou Zhao (3):
ipvs: pass parsed transport offset to state handlers
ipvs: use parsed transport offset in TCP state lookup
ipvs: use parsed transport offset in SCTP state lookup
include/net/ip_vs.h | 3 ++-
net/netfilter/ipvs/ip_vs_core.c | 10 +++++-----
net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +++++++-----------
net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +++--------
net/netfilter/ipvs/ip_vs_proto_udp.c | 3 ++-
5 files changed, 19 insertions(+), 26 deletions(-)
--
2.34.1
|
