ia64/xen-unstable

view patches/linux-2.6.12/net-csum.patch @ 6598:02e104bf03c0

New scripts I missed from previous security patch.
author kaf24@firebug.cl.cam.ac.uk
date Fri Sep 02 08:06:59 2005 +0000 (2005-09-02)
parents dd668f7527cb
children b2f4823b6ff0 b35215021b32 9af349b055e5 3233e7ecfa9f
line source
1 diff -ur linux-2.6.11/net/ipv4/netfilter/ip_conntrack_proto_udp.c linux-2.6.11-csum/net/ipv4/netfilter/ip_conntrack_proto_udp.c
2 --- linux-2.6.11/net/ipv4/netfilter/ip_conntrack_proto_udp.c 2005-05-27 11:47:48 +01:00
3 +++ linux-2.6.11-csum/net/ipv4/netfilter/ip_conntrack_proto_udp.c 2005-05-27 11:48:07 +01:00
4 @@ -120,6 +120,7 @@
5 * and moreover root might send raw packets.
6 * FIXME: Source route IP option packets --RR */
7 if (hooknum == NF_IP_PRE_ROUTING
8 + && skb->ip_summed != CHECKSUM_UNNECESSARY
9 && csum_tcpudp_magic(iph->saddr, iph->daddr, udplen, IPPROTO_UDP,
10 skb->ip_summed == CHECKSUM_HW ? skb->csum
11 : skb_checksum(skb, iph->ihl*4, udplen, 0))) {