[PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
patchwork-bot+netdevbpf at kernel.org
patchwork-bot+netdevbpf at kernel.org
Thu Oct 15 11:00:05 UTC 2026
Hello:
This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni at redhat.com>:
On Fri, 09 Oct 2026 12:59:19 -0300 you wrote:
> calipso_skbuff_setattr() adjusts payload_len by the length of the
> option it inserts or resizes:
>
> payload = ntohs(ip6_hdr->payload_len);
> ip6_hdr->payload_len = htons(payload + len_delta);
>
> GRO can build BIG TCP packets larger than IPV6_MAXPLEN, and stores
> payload_len == 0 for them; ipv6_payload_len() then falls back to
> skb->len. For such a packet forwarded to a destination mapped to
> CALIPSO, the code above writes len_delta (or 65536 + len_delta when
> shrinking) into payload_len, and ipv6_payload_len() no longer falls
> back to skb->len. nf_tables, conntrack and sch_cake rely on it.
>
> [...]
Here is the summary with links:
- [net,v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
https://git.kernel.org/netdev/net/c/8070ed578b6b
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
More information about the Linux-security-module-archive
mailing list