Re: [PATCH nf-next] netfilter: ipv6: nf_defrag: Always pass on packets to stack

On 2018-01-11 23:35, Florian Westphal wrote: Subash Abhinov Kasiviswanathan wrote: diff --git a/net/ipv6/netfilter/nf_conntrack_reasm.c b/net/ipv6/netfilter/nf_conntrack_reasm.c index 977d890..a44c8b2 100644 --- a/net/ipv6/netfilter/nf_conntrack_reasm.c +++

Re: [PATCH nf-next] netfilter: ipv6: nf_defrag: Always pass on packets to stack

Subash Abhinov Kasiviswanathan wrote: > diff --git a/net/ipv6/netfilter/nf_conntrack_reasm.c > b/net/ipv6/netfilter/nf_conntrack_reasm.c > index 977d890..a44c8b2 100644 > --- a/net/ipv6/netfilter/nf_conntrack_reasm.c > +++ b/net/ipv6/netfilter/nf_conntrack_reasm.c > @@

[PATCH nf-next] netfilter: ipv6: nf_defrag: Always pass on packets to stack

ipv6_defrag pulls network headers before fragment header. In case of an error, the netfilter layer is currently dropping these packets. This results in failure of some IPv6 standards tests which passed on older kernels due to the netfilter framework using cloning. The test case run here is a