netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment
authorFlorian Westphal <fw@strlen.de>
Tue, 21 May 2019 11:24:32 +0000 (13:24 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Jul 2019 07:53:31 +0000 (09:53 +0200)
commit041c181e6ba0f6d30c29ac5c6a4ec5ad52cc2fca
tree4a3fb525f70df6b0792e7c186162708509bc0a8d
parent48f611ecea0e67ba2065074e2c0f20bfcb860f85
netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment

commit 91a9048f238063dde7feea752b9dd386f7e3808b upstream.

We can't deal with tcp sequence number rewrite in flow_offload.
While at it, simplify helper check, we only need to know if the extension
is present, we don't need the helper data.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_flow_offload.c