Skip to content

cipso: fix total option length computation

Ondrej Mosnáček requested to merge omos/centos-stream-9:rhel-9.5-rhel44136-cipso-nops into main

JIRA: https://issues.redhat.com/browse/RHEL-44136

This fixes cipso_v4_skbuff_delattr() to actually strip the CIPSO IP options from the packets instead of just replacing them with IPOPT_NOPs/IPOPT_ENDs, as packets having even no-op IP options can be a reason for routers to drop them (see Jira/commit log for more details).

Signed-off-by: Ondrej Mosnacek omosnace@redhat.com

Edited by Ondrej Mosnáček

Merge request reports