[PATCH] net: exit immediately when encounter ipv6 fragment in skb_checksum_setup_ipv6()
From: Miaohe Lin
Date: Thu Aug 27 2020 - 07:56:58 EST
skb_checksum_setup_ipv6() always return -EPROTO if ipv6 packet is fragment.
So we should not continue to parse other header type in this case. Also
remove unnecessary local variable 'fragment'.
Signed-off-by: Miaohe Lin <linmiaohe@xxxxxxxxxx>
---
net/core/skbuff.c | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/net/core/skbuff.c b/net/core/skbuff.c
index c3496bd8e99e..4dc92290becd 100644
--- a/net/core/skbuff.c
+++ b/net/core/skbuff.c
@@ -4894,11 +4894,9 @@ static int skb_checksum_setup_ipv6(struct sk_buff *skb, bool recalculate)
u8 nexthdr;
unsigned int off;
unsigned int len;
- bool fragment;
bool done;
__sum16 *csum;
- fragment = false;
done = false;
off = sizeof(struct ipv6hdr);
@@ -4956,8 +4954,11 @@ static int skb_checksum_setup_ipv6(struct sk_buff *skb, bool recalculate)
hp = OPT_HDR(struct frag_hdr, skb, off);
- if (hp->frag_off & htons(IP6_OFFSET | IP6_MF))
- fragment = true;
+ /* Exit immediately when encounter ipv6 fragment. */
+ if (hp->frag_off & htons(IP6_OFFSET | IP6_MF)) {
+ err = -EPROTO;
+ goto out;
+ }
nexthdr = hp->nexthdr;
off += sizeof(struct frag_hdr);
@@ -4970,8 +4971,7 @@ static int skb_checksum_setup_ipv6(struct sk_buff *skb, bool recalculate)
}
err = -EPROTO;
-
- if (!done || fragment)
+ if (!done)
goto out;
csum = skb_checksum_setup_ip(skb, nexthdr, off);
--
2.19.1