diff options
| author | Davide Caratti <[email protected]> | 2020-10-15 16:39:27 +0000 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2020-10-15 18:45:19 +0000 |
| commit | 346e320cb2103edef709c4466a29140c4a8e527a (patch) | |
| tree | 405af21ad80b77a0bfda44fa68bbf92051c9c979 /net/tipc/node.c | |
| parent | Merge tag 'rxrpc-next-20201015' of git://git.kernel.org/pub/scm/linux/kernel/... (diff) | |
| download | kernel-346e320cb2103edef709c4466a29140c4a8e527a.tar.gz kernel-346e320cb2103edef709c4466a29140c4a8e527a.zip | |
netfilter: nftables: allow re-computing sctp CRC-32C in 'payload' statements
nftables payload statements are used to mangle SCTP headers, but they can
only replace the Internet Checksum. As a consequence, nftables rules that
mangle sport/dport/vtag in SCTP headers potentially generate packets that
are discarded by the receiver, unless the CRC-32C is "offloaded" (e.g the
rule mangles a skb having 'ip_summed' equal to 'CHECKSUM_PARTIAL'.
Fix this extending uAPI definitions and L4 checksum update function, in a
way that userspace programs (e.g. nft) can instruct the kernel to compute
CRC-32C in SCTP headers. Also ensure that LIBCRC32C is built if NF_TABLES
is 'y' or 'm' in the kernel build configuration.
Signed-off-by: Davide Caratti <[email protected]>
Signed-off-by: Florian Westphal <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'net/tipc/node.c')
0 files changed, 0 insertions, 0 deletions