Re: [PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-18 Thread Joe Stringer
On 18 April 2016 at 11:35, Pablo Neira Ayuso wrote: > On Thu, Apr 14, 2016 at 05:35:39PM -0700, Joe Stringer wrote: >> On 14 April 2016 at 03:35, Pablo Neira Ayuso wrote: >> > On Thu, Apr 14, 2016 at 10:40:15AM +0200, Florian Westphal wrote: >> >> David

Re: [PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-18 Thread Pablo Neira Ayuso
On Thu, Apr 14, 2016 at 05:35:39PM -0700, Joe Stringer wrote: > On 14 April 2016 at 03:35, Pablo Neira Ayuso wrote: > > On Thu, Apr 14, 2016 at 10:40:15AM +0200, Florian Westphal wrote: > >> David Laight wrote: > >> > From: Joe Stringer > >> > >

Re: [PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-14 Thread Joe Stringer
On 14 April 2016 at 03:35, Pablo Neira Ayuso wrote: > On Thu, Apr 14, 2016 at 10:40:15AM +0200, Florian Westphal wrote: >> David Laight wrote: >> > From: Joe Stringer >> > > Sent: 13 April 2016 19:10 >> > > This is the IPv6 equivalent of commit

Re: [PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-14 Thread Joe Stringer
On 14 April 2016 at 01:40, Florian Westphal wrote: > David Laight wrote: >> From: Joe Stringer >> > Sent: 13 April 2016 19:10 >> > This is the IPv6 equivalent of commit 8282f27449bf ("inet: frag: Always >> > orphan skbs inside ip_defrag()"). >> > >> >

Re: [PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-14 Thread Pablo Neira Ayuso
On Thu, Apr 14, 2016 at 10:40:15AM +0200, Florian Westphal wrote: > David Laight wrote: > > From: Joe Stringer > > > Sent: 13 April 2016 19:10 > > > This is the IPv6 equivalent of commit 8282f27449bf ("inet: frag: Always > > > orphan skbs inside ip_defrag()"). > > > > >

Re: [PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-14 Thread Florian Westphal
David Laight wrote: > From: Joe Stringer > > Sent: 13 April 2016 19:10 > > This is the IPv6 equivalent of commit 8282f27449bf ("inet: frag: Always > > orphan skbs inside ip_defrag()"). > > > > Prior to commit 029f7f3b8701 ("netfilter: ipv6: nf_defrag: avoid/free > >

RE: [PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-14 Thread David Laight
From: Joe Stringer > Sent: 13 April 2016 19:10 > This is the IPv6 equivalent of commit 8282f27449bf ("inet: frag: Always > orphan skbs inside ip_defrag()"). > > Prior to commit 029f7f3b8701 ("netfilter: ipv6: nf_defrag: avoid/free > clone operations"), ipv6 fragments sent to nf_ct_frag6_gather()

[PATCH nf] netfilter: ipv6: Orphan skbs in nf_ct_frag6_gather()

2016-04-13 Thread Joe Stringer
This is the IPv6 equivalent of commit 8282f27449bf ("inet: frag: Always orphan skbs inside ip_defrag()"). Prior to commit 029f7f3b8701 ("netfilter: ipv6: nf_defrag: avoid/free clone operations"), ipv6 fragments sent to nf_ct_frag6_gather() would be cloned (implicitly orphaning) prior to queueing