netfilter: conntrack: fix false CRC32c mismatch using paged skb
authorDavide Caratti <dcaratti@redhat.com>
Thu, 18 May 2017 16:01:43 +0000 (18:01 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 23 May 2017 20:54:14 +0000 (22:54 +0200)
commitf3c0eb05e258c6a48c2d1ef2fa71ffb6ff63cd18
tree7397ca4a6e3c9d980a8a599b070056f407124296
parent6d18c732b95c0a9d35e9f978b4438bba15412284
netfilter: conntrack: fix false CRC32c mismatch using paged skb

sctp_compute_cksum() implementation assumes that at least the SCTP header
is in the linear part of skb: modify conntrack error callback to avoid
false CRC32c mismatch, if the transport header is partially/entirely paged.

Fixes: cf6e007eef83 ("netfilter: conntrack: validate SCTP crc32c in PREROUTING")
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_proto_sctp.c