patch-2.1.6 linux/net/ipv4/ip_fragment.c

• Lines: 28
• Date: Sat Oct 19 10:08:12 1996
• Orig file: v2.1.5/linux/net/ipv4/ip_fragment.c
• Orig date: Wed Aug 7 14:00:08 1996

diff -u --recursive --new-file v2.1.5/linux/net/ipv4/ip_fragment.c linux/net/ipv4/ip_fragment.c
@@ -366,7 +366,7 @@
 		{
 			NETDEBUG(printk("Invalid fragment list: Fragment over size.\n"));
 			ip_free(qp);
-			frag_kfree_skb(skb,FREE_WRITE);
+			kfree_skb(skb,FREE_WRITE);
 			ip_statistics.IpReasmFails++;
 			return NULL;
 		}
@@ -466,6 +466,18 @@
 			return NULL;
 		}
 	}
+	
+	/*
+	 *	Attempt to construct an oversize packet.
+	 */
+	 
+	if(ntohs(iph->tot_len)+(int)offset>65535)
+	{
+		skb->sk = NULL;
+		frag_kfree_skb(skb, FREE_READ);
+		ip_statistics.IpReasmFails++;
+		return NULL;
+	}	
 
 	/*
 	 *	Determine the position of this fragment.