Hello, The (old) fix below is missing in the 2.6.27-stable tree. I wrote here and to stable@xxxxxxxxxx about it but got no reply. How to have it applied ? Thanks for help. Greg KH wrote : > 2.6.32-stable review patch. If anyone has any objections, please let me know. > > ---------------- > From: Shan Wei <shanwei@xxxxxxxxxxxxxx> > > [ Upstream commit c92b544bd5d8e7ed7d81c77bbecab6df2a95aa53 ] > > The commit 0b5ccb2(title:ipv6: reassembly: use seperate reassembly queues for > conntrack and local delivery) has broken the saddr&&daddr member of > nf_ct_frag6_queue when creating new queue. And then hash value > generated by nf_hashfn() was not equal with that generated by fq_find(). > So, a new received fragment can't be inserted to right queue. > > The patch fixes the bug with adding member of user to nf_ct_frag6_queue structure. > > Signed-off-by: Shan Wei <shanwei@xxxxxxxxxxxxxx> > Acked-by: Patrick McHardy <kaber@xxxxxxxxx> > Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx> > Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxx> > > --- > net/ipv6/netfilter/nf_conntrack_reasm.c | 1 + > 1 file changed, 1 insertion(+) > > --- a/net/ipv6/netfilter/nf_conntrack_reasm.c > +++ b/net/ipv6/netfilter/nf_conntrack_reasm.c > @@ -63,6 +63,7 @@ struct nf_ct_frag6_queue > struct inet_frag_queue q; > > __be32 id; /* fragment id */ > + u32 user; > struct in6_addr saddr; > struct in6_addr daddr; > -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html