On Fri, Jul 23, 2010 at 2:16 PM, Jan Engelhardt <jengelh@xxxxxxxxxx> wrote: > > > I wonder how this fares with trailing padding or data, like, when > you have a standard v4/v6 packet created in a raw socket, and append > a bunch of \0s to it. > > For the packets received, ip_rcv, ipv6_rcv and bridge all call pskb_trim_rcsum before feeding them to netfilter. The raw packets are sent via dev_queue_xmit(), and they don't pass through the output path of netfilter. One case, maybe the queued packets mangled "wrongly" in userspace are reinjected, however, we can't prevent a user from changing the payload_len wrongly. -- Regards, Changli Gao(xiaosuo@xxxxxxxxx) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
