From: Ian Jackson Date: Wed, 19 Mar 2014 21:50:36 +0000 (+0000) Subject: fragmentation: Fix fragmentation field check X-Git-Tag: debian/0.3.1_beta1~15 X-Git-Url: https://git.distorted.org.uk/~mdw/secnet/commitdiff_plain/eff13010d3de989ea2414048799bff36ad242fa0?ds=sidebyside;hp=eff13010d3de989ea2414048799bff36ad242fa0 fragmentation: Fix fragmentation field check When an incoming packet is for secnet itself, secnet checks the fragmentation field in the IP header. (Contrary to the spec, secnet discards fragmented packets addressed to its own private address; however, this is a tolerable defect as secnet never sends packets of its own apart from ICMP errors and ICMP Echo Reply.) However, secnet would incorrectly check the reserved flag bit in the 16-bit fragmentation superfield. Fix this. Also introduce some manifest constants for the bits in the 16-bit fragmentation superfield. Signed-off-by: Ian Jackson ---