ipv6: make fragment identifications less predictable, CVE-2011-2699

[linux-flexiantxendom0-natty.git] / net / ipv6 / af_inet6.c

diff --git a/net/ipv6/af_inet6.c b/net/ipv6/af_inet6.c
index 978e80e..ca171b7 100644 (file)
--- a/net/ipv6/af_inet6.c
+++ b/net/ipv6/af_inet6.c
@@ -1081,6 +1081,8 @@ static int __init inet6_init(void)
                goto out;
        }
 
+       initialize_hashidentrnd();
+
        err = proto_register(&tcpv6_prot, 1);
        if (err)
                goto out;