Lorenzo Bianconi
a908f986dd
openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len
...
[ Upstream commit 17843655708e1941c0653af3cd61be6948e36f43 ]
ovs connection tracking module performs de-fragmentation on incoming
fragmented traffic. Take info account if traffic has been de-fragmented
in execute_check_pkt_len action otherwise we will perform the wrong
nested action considering the original packet size. This issue typically
occurs if ovs-vswitchd adds a rule in the pipeline that requires connection
tracking (e.g. OVN stateful ACLs) before execute_check_pkt_len action.
Moreover take into account GSO fragment size for GSO packet in
execute_check_pkt_len routine
Fixes: 4d5ec89fc8 ("net: openvswitch: Add a new action check_pkt_len")
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-06-30 15:36:45 -04:00
..
actions.c
openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len
2020-06-30 15:36:45 -04:00
conntrack.c
net: openvswitch: ovs_ct_exit to be done under ovs_lock
2020-04-29 16:33:08 +02:00
conntrack.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 295
2019-06-05 17:36:38 +02:00
datapath.c
net: openvswitch: ovs_ct_exit to be done under ovs_lock
2020-04-29 16:33:08 +02:00
datapath.h
net: openvswitch: Set OvS recirc_id from tc chain index
2019-09-06 14:59:18 +02:00
dp_notify.c
net: openvswitch: use netif_ovs_is_port() instead of opencode
2019-07-08 15:53:25 -07:00
flow.c
net: openvswitch: Set OvS recirc_id from tc chain index
2019-09-06 14:59:18 +02:00
flow.h
openvswitch: Properly set L4 keys on "later" IP fragments
2019-08-28 14:53:51 -07:00
flow_netlink.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00
flow_netlink.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00
flow_table.c
net: openvswitch: rename flow_stats to sw_flow_stats
2019-07-19 21:27:45 -07:00
flow_table.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00
Kconfig
treewide: Add SPDX license identifier - Makefile/Kconfig
2019-05-21 10:50:46 +02:00
Makefile
meter.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 206
2019-05-30 11:29:53 -07:00
meter.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 206
2019-05-30 11:29:53 -07:00
vport-geneve.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
vport-gre.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00
vport-internal_dev.c
net: openvswitch: free vport unless register_netdevice() succeeds
2019-10-22 14:45:08 -07:00
vport-internal_dev.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00
vport-netdev.c
net: openvswitch: use netif_ovs_is_port() instead of opencode
2019-07-08 15:53:25 -07:00
vport-netdev.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00
vport-vxlan.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00
vport.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2019-06-17 20:20:36 -07:00
vport.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 269
2019-06-05 17:30:29 +02:00