From 02f2107cf13a88c551f6defeea3f356f5f7b8cba Mon Sep 17 00:00:00 2001
From: Phil Oester <kernel@linuxace.com>
Date: Wed, 12 Jun 2013 10:58:20 +0200
Subject: [PATCH] --- yaml --- r: 377379 b: refs/heads/master c:
 b396966c4688522863572927cb30aa874b3ec504 h: refs/heads/master i:   377377:
 3cecd410f4fe5bc77808ad01b84382ab6d24329e   377375:
 1fb4f794007dabcfc3d5334f83e9f6c984b918ff v: v3

---
 [refs]                          | 2 +-
 trunk/net/netfilter/xt_TCPMSS.c | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/[refs] b/[refs]
index af2a5a5f2dee..935cdba99933 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 70d19f805f8c047fc0a28dec9306b3773971c8d9
+refs/heads/master: b396966c4688522863572927cb30aa874b3ec504
diff --git a/trunk/net/netfilter/xt_TCPMSS.c b/trunk/net/netfilter/xt_TCPMSS.c
index 6640a224f9fb..7011c71646f0 100644
--- a/trunk/net/netfilter/xt_TCPMSS.c
+++ b/trunk/net/netfilter/xt_TCPMSS.c
@@ -57,6 +57,10 @@ tcpmss_mangle_packet(struct sk_buff *skb,
 	u16 newmss;
 	u8 *opt;
 
+	/* This is a fragment, no TCP header is available */
+	if (par->fragoff != 0)
+		return XT_CONTINUE;
+
 	if (!skb_make_writable(skb, skb->len))
 		return -1;