[PATCH nf v3 0/3] ipvs: csum validations and data offsets

[Julian Anastasov <ja@xxxxxx>]

        Hello,

        This patchset contains fixes for the checksum
validations for ICMPv6 and switches TCP, UDP and ICMP to
use nf_checksum for LOCAL_IN.

        It also corrects offsets to be based on skb->data and to
respect the network offset.

        Finally, it prevents to read/write ICMP payload for
non-first embedded fragments wrongly assuming the TCP/UDP/SCTP
ports are present there.

Changes:

v2->v3:
* patch 2: add __maybe_unused to coff and outer_proto to silence
  the compiler warnings when IPVS debugging is not enabled, reported
  by the kernel test robot <lkp@xxxxxxxxx>:
  https://lore.kernel.org/oe-kbuild-all/202607210623.du5PqolJ-lkp@xxxxxxxxx/
* add patch 3

v1->v2:
* patch 1: switch to using nf_checksum, validate only at LOCAL_IN and
  for MASQ
* add patch 2

Julian Anastasov (3):
  ipvs: fix the checksum validations
  ipvs: fix places with wrong packet offsets
  ipvs: do not mangle ICMP replies for non-first fragments

 include/net/ip_vs.h                   |  48 +++++--
 net/netfilter/ipvs/ip_vs_app.c        |   4 +-
 net/netfilter/ipvs/ip_vs_core.c       | 180 +++++++++++++-------------
 net/netfilter/ipvs/ip_vs_proto_sctp.c |  19 +--
 net/netfilter/ipvs/ip_vs_proto_tcp.c  |  48 ++-----
 net/netfilter/ipvs/ip_vs_proto_udp.c  |  54 ++------
 net/netfilter/ipvs/ip_vs_xmit.c       |  42 ++++--
 7 files changed, 193 insertions(+), 202 deletions(-)

-- 
2.55.0