Dmitry Popov b70905e7cb xt_RAWNAT: skb writable part might not include whole L4 header (IPv4 case) ...

Consider TCP/IPv4 packet with IP options: sizeof(*iph) + sizeof(struct
tcphdr) is not enough to include tcp checksum. It may hurt if this
packet is fragmented.

Therefore, we should use iph->ihl * 4 instead of sizeof(*iph).

Signed-off-by: Dmitry Popov <dp@highloadlab.com>

2013-05-08 13:21:54 +02:00

8.6 KiB

Raw Blame History

View Raw