d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

For translated packets do not adjust UDP checksum if it is zero.

Browse Source 
In case when decrypted and decapsulated packet is an UDP datagram,
check that its checksum is not zero before doing incremental checksum
adjustment.

Reported by:	Eugene Grosbein
Tested by:	Eugene Grosbein
This commit is contained in:
ae 2017-02-18 19:53:37 +00:00
parent 0a7efde9f0
commit a74c9ad083
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sys/netipsec/udpencap.c
View File

@ -266,6 +266,9 @@ udp_ipsec_adjust_cksum(struct mbuf *m, struct secasvar *sav, int proto,
/* Incrementally recompute. */
m_copydata(m, skip + off, sizeof(cksum),
(caddr_t)&cksum);
/* Do not adjust UDP checksum if it is zero. */
if (proto == IPPROTO_UDP && cksum == 0)
return;
cksum = in_addword(cksum, sav->natt->cksum);
} else {
/* No OA from IKEd. */