Thread (4 messages) 4 messages, 4 authors, 13d ago

Re: [PATCH net v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()

flat view

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-10-15 11:00:06
Also in: linux-security-module

Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni [off-list ref]:

On Fri, 09 Oct 2026 12:59:19 -0300 you wrote:
calipso_skbuff_setattr() adjusts payload_len by the length of the
option it inserts or resizes:

	payload = ntohs(ip6_hdr->payload_len);
	ip6_hdr->payload_len = htons(payload + len_delta);

GRO can build BIG TCP packets larger than IPV6_MAXPLEN, and stores
payload_len == 0 for them; ipv6_payload_len() then falls back to
skb->len.  For such a packet forwarded to a destination mapped to
CALIPSO, the code above writes len_delta (or 65536 + len_delta when
shrinking) into payload_len, and ipv6_payload_len() no longer falls
back to skb->len.  nf_tables, conntrack and sch_cake rely on it.

[...]
Here is the summary with links:
  - [net,v2] calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
    https://git.kernel.org/netdev/net/c/8070ed578b6b

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help