Skip to content
  • Ansis Atteka's avatar
    ip: generate unique IP identificator if local fragmentation is allowed · 703133de
    Ansis Atteka authored
    
    
    If local fragmentation is allowed, then ip_select_ident() and
    ip_select_ident_more() need to generate unique IDs to ensure
    correct defragmentation on the peer.
    
    For example, if IPsec (tunnel mode) has to encrypt large skbs
    that have local_df bit set, then all IP fragments that belonged
    to different ESP datagrams would have used the same identificator.
    If one of these IP fragments would get lost or reordered, then
    peer could possibly stitch together wrong IP fragments that did
    not belong to the same datagram. This would lead to a packet loss
    or data corruption.
    
    Signed-off-by: default avatarAnsis Atteka <aatteka@nicira.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    703133de