diff options
| author | James Tucker <james@tailscale.com> | 2025-06-03 15:24:31 -0700 |
|---|---|---|
| committer | James Tucker <jftucker@gmail.com> | 2025-06-13 11:06:02 -0700 |
| commit | 9206e766edc0492a3899633c5ea3a9a8ace12fe0 (patch) | |
| tree | ec89308bed702ef35d9a78415ed3bee9e1b387a5 /control/controlhttp/controlhttpserver/controlhttpserver.go | |
| parent | b0f7b23efe1c7d02e8caec2a5ad74ab2d5cb138a (diff) | |
| download | tailscale-9206e766edc0492a3899633c5ea3a9a8ace12fe0.tar.xz tailscale-9206e766edc0492a3899633c5ea3a9a8ace12fe0.zip | |
net/packet: cleanup IPv4 fragment guards
The first packet fragment guard had an additional guard clause that was
incorrectly comparing a length in bytes to a length in octets, and was
also comparing what should have been an entire IPv4 through transport
header length to a subprotocol payload length. The subprotocol header
size guards were otherwise protecting against short transport headers,
as is the conservative non-first fragment minimum offset size. Add an
explicit disallowing of fragmentation for TSMP for the avoidance of
doubt.
Updates #cleanup
Updates #5727
Signed-off-by: James Tucker <james@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver/controlhttpserver.go')
0 files changed, 0 insertions, 0 deletions
