From 17ee6f08d4bcae53efeeba97305f21aadda8f8b0 Mon Sep 17 00:00:00 2001 From: Rajesh Saluja Date: Thu, 26 Jul 2018 14:13:09 -0700 Subject: Reverse the logic of flagging malformed packet in fragmentation code to allow padding Change-Id: I051c137ae18fd436a798a12a56a9d12f8eaa2e08 Signed-off-by: Rajesh Saluja (cherry picked from commit 1f895c9a40f446ca9f1b7803f350c70ebb3ad0fa) --- src/vnet/ip/ip_frag.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/vnet/ip/ip_frag.c b/src/vnet/ip/ip_frag.c index 9f9373857b9..8d495af63ed 100644 --- a/src/vnet/ip/ip_frag.c +++ b/src/vnet/ip/ip_frag.c @@ -66,7 +66,7 @@ ip4_frag_do_fragment (vlib_main_t * vm, u32 pi, u32 ** buffer, ptr = 0; max = (mtu - sizeof (*ip4) - vnet_buffer (p)->ip_frag.header_offset) & ~0x7; - if (rem < (p->current_length - offset - sizeof (*ip4))) + if (rem > (p->current_length - offset - sizeof (*ip4))) { *error = IP_FRAG_ERROR_MALFORMED; return; -- cgit 1.2.3-korg