git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a7ca7fc) | patch
netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE
authorChristoph Paasch <christoph.paasch@gmail.com>
Tue, 5 May 2009 13:32:16 +0000 (15:32 +0200)
committerPatrick McHardy <kaber@trash.net>
Tue, 5 May 2009 13:32:16 +0000 (15:32 +0200)
commitb98b4947cb79d670fceca0e951c092eea93e9baa
tree4daddb336ddbab1e7ac7a6b10e68add36ab908actree | snapshot
parenta7ca7fccacc029958fd09985e7f3529b90ec791dcommit | diff
netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE

As packets ending with NEXTHDR_NONE don't have a last extension header,
the check for the length needs to be after the check for NEXTHDR_NONE.

Signed-off-by: Christoph Paasch <christoph.paasch@gmail.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
net/ipv6/netfilter/ip6t_ipv6header.c diff | blob | history
Full containers within linux kernel