Merge "clatd bpf: drop multicast" into main am: b45a61bc3f

Original change: https://android-review.googlesource.com/c/platform/packages/modules/Connectivity/+/3560669

Change-Id: I38049824bee9a0de3f433b41883f265cbe800864
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Maciej Żenczykowski 2025-03-25 15:56:47 -07:00 • committed by Automerger Merge Worker
commit 35187a62c8

View file

@ -288,8 +288,8 @@ DEFINE_BPF_PROG("schedcls/egress4/clat_rawip", AID_ROOT, AID_SYSTEM, sched_cls_e
// We cannot handle IP options, just standard 20 byte == 5 dword minimal IPv4 header
if (ip4->ihl != 5) return TC_ACT_PIPE;
// Packet must not be multicast
if ((ip4->daddr & htonl(0xf0000000)) == htonl(0xe0000000)) return TC_ACT_PIPE;
// Packet must not be multicast, if it is just outright drop it.
if ((ip4->daddr & htonl(0xf0000000)) == htonl(0xe0000000)) return TC_ACT_SHOT;
// Calculate the IPv4 one's complement checksum of the IPv4 header.
__wsum sum4 = 0;