netfilter: ipv6: nf_defrag: Kill frag queue
Release the frag queue if an error in IPv6 frag header is detected
so that it does not interfere with IPv6 frag reassembly and timeouts.
CRs-Fixed: 2168587
Change-Id: I4eed2e7ce383fddde2818880e3795ada9ed7fcb5
Signed-off-by: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>
diff --git a/net/ipv6/netfilter/nf_conntrack_reasm.c b/net/ipv6/netfilter/nf_conntrack_reasm.c
index 5edfe66..64ec233 100644
--- a/net/ipv6/netfilter/nf_conntrack_reasm.c
+++ b/net/ipv6/netfilter/nf_conntrack_reasm.c
@@ -263,6 +263,7 @@
* this case. -DaveM
*/
pr_debug("end of fragment not rounded to 8 bytes.\n");
+ inet_frag_kill(&fq->q, &nf_frags);
return -EPROTO;
}
if (end > fq->q.len) {