commit bbf4a6bc8c4d59a0a9033fc2cb96ec03430c96e4

Author: Herbert Xu <herbert@gondor.apana.org.au>
Date:   Tue Feb 13 12:32:58 2007 -0800

    [NETFILTER]: Clear GSO bits for TCP reset packet

    The TCP reset packet is copied from the original.  This
    includes all the GSO bits which do not apply to the new
    packet.  So we should clear those bits.

    Spotted by Patrick McHardy.

    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
    Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/net/ipv4/netfilter/ipt_REJECT.c b/net/ipv4/netfilter/ipt_REJECT.c
index 269bc2067cb80085588f132703399371468434cf..e7cdf50112a9ded20ba7fd0ecd19a971bd3081ff 100644 (file)
--- a/net/ipv4/netfilter/ipt_REJECT.c
+++ b/net/ipv4/netfilter/ipt_REJECT.c
@@ -148,6 +148,10 @@ static void send_reset(struct sk_buff *oldskb, int hook)
        nskb->nfmark = 0;
        skb_init_secmark(nskb);
 
+       skb_shinfo(nskb)->gso_size = 0;
+       skb_shinfo(nskb)->gso_segs = 0;
+       skb_shinfo(nskb)->gso_type = 0;
+
        tcph = (struct tcphdr *)((u_int32_t*)nskb->nh.iph + nskb->nh.iph->ihl);
 
        /* Swap source and dest */