Phil Sutter <phil@xxxxxx> wrote: > Assume that caller's 'to' offset really represents an upper boundary for > the pattern search, so patterns extending past this offset are to be > rejected. > > The old behaviour also was kind of inconsistent when it comes to > fragmentation (or otherwise non-linear skbs): If the pattern started in > between 'to' and 'from' offsets but extended to the next fragment, it > was not found if 'to' offset was still within the current fragment. > > Test the new behaviour in a kselftest using iptables' string match. Reviewed-by: Florian Westphal <fw@xxxxxxxxx>
