Re: [PATCH nf] netfilter: nft_exthdr: Fix non-linear header modification

[Xiao Liang <shaw.leon@xxxxxxxxx>]

On Fri, Aug 25, 2023 at 11:11 AM Florian Westphal <fw@xxxxxxxxx> wrote:
>
> > @@ -325,9 +324,9 @@ static void nft_exthdr_tcp_strip_eval(const struct nft_expr *expr,
> >       if (skb_ensure_writable(pkt->skb, nft_thoff(pkt) + tcphdr_len))
>
> Just use the above in nft_exthdr_tcp_set_eval and place it before the loop?

Sure. Need to pull the entire TCP header with skb_ensure_writable() then.