Huajian Yang de6edd3237 netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it ...

[ Upstream commit aa04c6f45b ]

The config NF_CONNTRACK_BRIDGE will change the bridge forwarding for
fragmented packets.

The original bridge does not know that it is a fragmented packet and
forwards it directly, after NF_CONNTRACK_BRIDGE is enabled, function
nf_br_ip_fragment and br_ip6_fragment will check the headroom.

In original br_forward, insufficient headroom of skb may indeed exist,
but there's still a way to save the skb in the device driver after
dev_queue_xmit.So droping the skb will change the original bridge
forwarding in some cases.

Fixes: 3c171f496e ("netfilter: bridge: add connection tracking system")
Signed-off-by: Huajian Yang <huajianyang@asrmicro.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-06-19 15:31:46 +02:00

..

netfilter

netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it

2025-06-19 15:31:46 +02:00

br_arp_nd_proxy.c

bridge: Add per-{Port, VLAN} neighbor suppression data path support

2023-04-21 08:25:50 +01:00

br_cfm_netlink.c

bridge: cfm: fix enum typo in br_cc_ccm_tx_parse

2023-12-26 22:38:13 +00:00

br_cfm.c

…

br_device.c

netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local

2024-09-03 11:36:43 +02:00

br_fdb.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

br_forward.c

net: bridge: mst: Check vlan state for egress decision

2024-07-15 13:40:28 +01:00

br_if.c

net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode

2023-07-03 09:11:34 +01:00

br_input.c

netfilter: br_netfilter: skip conntrack input hook for promisc packets

2024-04-11 12:09:33 +02:00

br_ioctl.c

…

br_mdb.c

bridge: mdb: Allow replace of a host-joined group

2025-05-29 11:03:01 +02:00

br_mrp_netlink.c

…

br_mrp_switchdev.c

…

br_mrp.c

…

br_mst.c

net: bridge: mst: fix suspicious rcu usage in br_mst_set_state

2024-06-12 18:24:24 -07:00

br_multicast_eht.c

treewide: Convert del_timer*() to timer_shutdown*()

2022-12-25 13:38:09 -08:00

br_multicast.c

net: bridge: mcast: wait for previous gc cycles when removing port

2024-08-05 16:33:56 -07:00

br_netfilter_hooks.c

ipv4: Convert ip_route_input() to dscp_t.

2025-03-07 18:25:29 +01:00

br_netfilter_ipv6.c

netfilter: bridge: replace physindev with physinif in nf_bridge_info

2024-01-17 12:02:49 +01:00

br_netlink_tunnel.c

net: bridge: fix an inconsistent indentation

2024-06-05 10:04:47 +01:00

br_netlink.c

bridge: Handle error of rtnl_register_module().

2024-10-10 15:39:35 +02:00

br_nf_core.c

bridge: netfilter: Fix forwarding of fragmented packets

2025-05-29 11:03:16 +02:00

br_private_cfm.h

…

br_private_mcast_eht.h

…

br_private_mrp.h

…

br_private_stp.h

…

br_private_tunnel.h

bridge: always declare tunnel functions

2023-05-17 21:28:58 -07:00

br_private.h

bridge: netfilter: Fix forwarding of fragmented packets

2025-05-29 11:03:16 +02:00

br_stp_bpdu.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

br_stp_if.c

…

br_stp_timer.c

…

br_stp.c

…

br_switchdev.c

net: bridge: switchdev: Ensure deferred event delivery on unoffload

2024-02-16 09:36:37 +00:00

br_sysfs_br.c

…

br_sysfs_if.c

…

br_vlan_options.c

bridge: vlan: Allow setting VLAN neighbor suppression state

2023-04-21 08:25:50 +01:00

br_vlan_tunnel.c

ip_tunnel: convert __be16 tunnel flags to bitmaps

2024-04-01 10:49:28 +01:00

br_vlan.c

net: bridge: switchdev: do not notify new brentries as changed

2025-04-25 10:47:45 +02:00

br.c

bridge: use exit_batch_rtnl() method

2024-02-07 18:55:12 -08:00

Kconfig

…

Makefile

…