UbiquitousOS
/
OpenCloudOS-Kernel
mirror of https://gitee.com/OpenCloudOS/OpenCloudOS-Kernel.git
11
0
Fork 0
Code Issues Projects Releases Wiki Activity

netfilter: nf_dup4: remove redundant checksum recalculation 

IP header checksum will be recalculated at ip_local_out, so
there's no need to calculated it here, remove it. Also update
code comments to illustrate it, and delete the misleading
comments about checksum recalculation.

Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
Liping Zhang 2016-07-30 19:44:12 +08:00 committed by Pablo Neira Ayuso
parent ceee4091d6
commit 9f7c824a44
1 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
net/ipv4/netfilter/nf_dup_ipv4.c
View File

@ -74,21 +74,19 @@ void nf_dup_ipv4(struct net *net, struct sk_buff *skb, unsigned int hooknum,
nf_conntrack_get(skb->nfct); nf_conntrack_get(skb->nfct);
#endif #endif
/* /*
* If we are in PREROUTING/INPUT, the checksum must be recalculated * If we are in PREROUTING/INPUT, decrease the TTL to mitigate potential
* since the length could have changed as a result of defragmentation. * loops between two hosts.
*
* We also decrease the TTL to mitigate potential loops between two
* hosts.
* *
* Set %IP_DF so that the original source is notified of a potentially * Set %IP_DF so that the original source is notified of a potentially
* decreased MTU on the clone route. IPv6 does this too. * decreased MTU on the clone route. IPv6 does this too.
*
* IP header checksum will be recalculated at ip_local_out.
*/ */
iph = ip_hdr(skb); iph = ip_hdr(skb);
iph->frag_off |= htons(IP_DF); iph->frag_off |= htons(IP_DF);
if (hooknum == NF_INET_PRE_ROUTING || if (hooknum == NF_INET_PRE_ROUTING ||
hooknum == NF_INET_LOCAL_IN) hooknum == NF_INET_LOCAL_IN)
--iph->ttl; --iph->ttl;
ip_send_check(iph);
if (nf_dup_ipv4_route(net, skb, gw, oif)) { if (nf_dup_ipv4_route(net, skb, gw, oif)) {
__this_cpu_write(nf_skb_duplicated, true); __this_cpu_write(nf_skb_duplicated, true);