map: fix ip4-map-t DF behavior 90/24090/7
authorVladimir Ratnikov <vratnikov@netgate.com>
Fri, 20 Dec 2019 09:55:50 +0000 (04:55 -0500)
committerOle Trøan <otroan@employees.org>
Fri, 3 Jan 2020 10:11:05 +0000 (10:11 +0000)
commit87663cdf644fb7c94c0fec9460829b7e4e7c35ca
tree035e274a906c7d1b6b2ef7b2b51661ed4242d240
parentf126e746fc01c75bc99329d10ce9127b26b23814
map: fix ip4-map-t DF behavior

ip4_is_fragment(header)
or ip4_is_first_fragment(header) didn't changed
when packet with fragmentation needed arrives.

This patch checks DF flag and MTU with packet
length and if DF is set and length > MTU, packet
is dropped. In case if ignore_df is set, DF flag
makes no sense.

Type: fix
Fixes: d6d50cebde647f9a5ee7251a7fef977506f315d7

Signed-off-by: Vladimir Ratnikov <vratnikov@netgate.com>
Change-Id: I720e25167c19a0b13ac5fdfb41b12c0bbdc00d09
src/plugins/map/ip4_map_t.c