diff options
| author |   Matus Fabian <matfabia@cisco.com> | 2018-09-05 06:01:55 -0700 |
|---|---|---|
| committer |   Ole Trøan <otroan@employees.org> | 2018-09-06 07:32:30 +0000 |
| commit | a7f8b228ff505acc052a77101b12e714ead26536 (patch) | |
| tree | 44f42ff50c300bfd3c5517de7a4de8e537541c42 /src/plugins/nat/nat64_out2in.c | |
| parent | 05ca4a364366ffd639b6136967330deb249cbe22 (diff) | |
NAT: fix maximum out of order fragments (VPP-1399)
All fragments should be dropped when max_frag is 1 and 2 non-initial fragments are received before first fragment.
Change-Id: Id0c968f45629698e347e8226c5926f27b48b82d6
Signed-off-by: Matus Fabian <matfabia@cisco.com>
Diffstat (limited to 'src/plugins/nat/nat64_out2in.c')
| -rw-r--r-- | src/plugins/nat/nat64_out2in.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/plugins/nat/nat64_out2in.c b/src/plugins/nat/nat64_out2in.c index d4b0c3987f9..54a7e82c7c1 100644 --- a/src/plugins/nat/nat64_out2in.c +++ b/src/plugins/nat/nat64_out2in.c @@ -785,7 +785,8 @@ nat64_out2in_reass_node_fn (vlib_main_t * vm, vlib_node_runtime_t * node, if (PREDICT_FALSE (reass0->sess_index == (u32) ~ 0)) { - if (nat_ip4_reass_add_fragment (reass0, bi0)) + if (nat_ip4_reass_add_fragment + (reass0, bi0, &fragments_to_drop)) { b0->error = node->errors[NAT64_OUT2IN_ERROR_MAX_FRAG]; next0 = NAT64_OUT2IN_NEXT_DROP; |