Defer the packet size check until after the firewall has had a look at it. This
means that the firewall now has the opportunity to (re-)fragment an oversized
packet.
This mirrors what the slow path does.
Details
Details
- Reviewers
bz gnn ae - Group Reviewers
network - Commits
- rS324996: Evaluate packet size after the firewall had its chance in the ip6 fast path
Diff Detail
Diff Detail
- Repository
- rS FreeBSD src repository - subversion
- Lint
Lint Skipped - Unit
Tests Skipped - Build Status
Buildable 12222
Event Timeline
| sys/netinet6/ip6_fastfwd.c | ||
|---|---|---|
| 203–205 | This doesn't look like the code from head/. Original code uses PFIL_IN and PFIL_OUT directions. | |
| sys/netinet6/ip6_fastfwd.c | ||
|---|---|---|
| 203–205 | Ah, right. I've got another patch I'm working on to add 'PFIL_FWD', but that's not quite ready yet. I'll rebase this so it doesn't include that change. | |