ipvs: ensure that ICMP cannot be sent in reply to ICMP
authorAlex Gartrell <agartrell@fb.com>
Wed, 26 Aug 2015 16:40:38 +0000 (09:40 -0700)
committerSimon Horman <horms@verge.net.au>
Tue, 1 Sep 2015 01:33:59 +0000 (10:33 +0900)
commit89621f31d18b81a6c66a97fc2a80b3b6e5937a81
tree5860f46bfac8bf8dea73583ee06e5ad45d9036f0
parent6044eeffafbe35154c5d3b04b73e8938a62e5d39
ipvs: ensure that ICMP cannot be sent in reply to ICMP

Check the header for icmp before sending a PACKET_TOO_BIG

Signed-off-by: Alex Gartrell <agartrell@fb.com>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
net/netfilter/ipvs/ip_vs_xmit.c