- ip_hdrlen(skb) < sizeof(struct iphdr))
- return NF_ACCEPT;
-
- if (ip_is_fragment(ip_hdr(skb))) /* IP_NODEFRAG setsockopt set */
- return NF_ACCEPT;
-
+ if (ip_is_fragment(ip_hdr(skb))) { /* IP_NODEFRAG setsockopt set */
+ enum ip_conntrack_info ctinfo;
+ struct nf_conn *tmpl;
--- a/net/ipv4/netfilter/nf_nat_l3proto_ipv4.c
+++ b/net/ipv4/netfilter/nf_nat_l3proto_ipv4.c
@@ -355,11 +355,6 @@ nf_nat_ipv4_out(void *priv, struct sk_bu