|
@@ -189,16 +189,18 @@ static void ip_expire(unsigned long arg)
|
|
goto out;
|
|
goto out;
|
|
|
|
|
|
ipq_kill(qp);
|
|
ipq_kill(qp);
|
|
-
|
|
|
|
- if (!(qp->q.flags & INET_FRAG_EVICTED))
|
|
|
|
- IP_INC_STATS_BH(net, IPSTATS_MIB_REASMTIMEOUT);
|
|
|
|
IP_INC_STATS_BH(net, IPSTATS_MIB_REASMFAILS);
|
|
IP_INC_STATS_BH(net, IPSTATS_MIB_REASMFAILS);
|
|
|
|
|
|
- if ((qp->q.flags & INET_FRAG_FIRST_IN) && qp->q.fragments != NULL) {
|
|
|
|
|
|
+ if (!(qp->q.flags & INET_FRAG_EVICTED)) {
|
|
struct sk_buff *head = qp->q.fragments;
|
|
struct sk_buff *head = qp->q.fragments;
|
|
const struct iphdr *iph;
|
|
const struct iphdr *iph;
|
|
int err;
|
|
int err;
|
|
|
|
|
|
|
|
+ IP_INC_STATS_BH(net, IPSTATS_MIB_REASMTIMEOUT);
|
|
|
|
+
|
|
|
|
+ if (!(qp->q.flags & INET_FRAG_FIRST_IN) || !qp->q.fragments)
|
|
|
|
+ goto out;
|
|
|
|
+
|
|
rcu_read_lock();
|
|
rcu_read_lock();
|
|
head->dev = dev_get_by_index_rcu(net, qp->iif);
|
|
head->dev = dev_get_by_index_rcu(net, qp->iif);
|
|
if (!head->dev)
|
|
if (!head->dev)
|
|
@@ -211,8 +213,7 @@ static void ip_expire(unsigned long arg)
|
|
if (err)
|
|
if (err)
|
|
goto out_rcu_unlock;
|
|
goto out_rcu_unlock;
|
|
|
|
|
|
- /*
|
|
|
|
- * Only an end host needs to send an ICMP
|
|
|
|
|
|
+ /* Only an end host needs to send an ICMP
|
|
* "Fragment Reassembly Timeout" message, per RFC792.
|
|
* "Fragment Reassembly Timeout" message, per RFC792.
|
|
*/
|
|
*/
|
|
if (qp->user == IP_DEFRAG_AF_PACKET ||
|
|
if (qp->user == IP_DEFRAG_AF_PACKET ||
|
|
@@ -221,7 +222,6 @@ static void ip_expire(unsigned long arg)
|
|
(skb_rtable(head)->rt_type != RTN_LOCAL)))
|
|
(skb_rtable(head)->rt_type != RTN_LOCAL)))
|
|
goto out_rcu_unlock;
|
|
goto out_rcu_unlock;
|
|
|
|
|
|
-
|
|
|
|
/* Send an ICMP "Fragment Reassembly Timeout" message. */
|
|
/* Send an ICMP "Fragment Reassembly Timeout" message. */
|
|
icmp_send(head, ICMP_TIME_EXCEEDED, ICMP_EXC_FRAGTIME, 0);
|
|
icmp_send(head, ICMP_TIME_EXCEEDED, ICMP_EXC_FRAGTIME, 0);
|
|
out_rcu_unlock:
|
|
out_rcu_unlock:
|