diff options
| author | Ghanan Gowripalan <ghanan@google.com> | 2021-09-22 12:36:38 -0700 |
|---|---|---|
| committer | gVisor bot <gvisor-bot@google.com> | 2021-09-22 12:39:31 -0700 |
| commit | 5768a147b124efbeff2800794da7ba961146af19 (patch) | |
| tree | abc2d2c567359c864792c027c0b1a84df3655d08 /pkg/seccomp/seccomp_rules.go | |
| parent | cc095a6e4c26c6a818e92a7d1f5d2b59c2a2e163 (diff) | |
Populate forwarded packet buffer's TransportHeader
Turns out certain features of iptables (e.g. NAT) will not perform
any checks/work unless both the Network and Transport headers are
populated.
With this change, provide the packet directly to the outgoing
network endpoint's `writePacket` method instead of going
through `WriteHeaderIncludedPacket` which expected the headers
to not be set.
PiperOrigin-RevId: 398304004
Diffstat (limited to 'pkg/seccomp/seccomp_rules.go')
0 files changed, 0 insertions, 0 deletions