git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ec8d540) | patch
netfilter: conntrack: check for NEXTHDR_NONE before header sanity checking
authorChristoph Paasch <christoph.paasch@gmail.com>
Mon, 16 Mar 2009 14:52:11 +0000 (15:52 +0100)
committerPatrick McHardy <kaber@trash.net>
Mon, 16 Mar 2009 14:52:11 +0000 (15:52 +0100)
commitd1238d5337e8e53cddea77c2a26d26b6eb5a982f
tree89f8cf58ffbd7f20665f88954df5ec4136b8d73btree | snapshot
parentec8d540969da9a70790e9028d57b5b577dd7aa77commit | diff
netfilter: conntrack: check for NEXTHDR_NONE before header sanity checking

NEXTHDR_NONE doesn't has an IPv6 option header, so the first check
for the length will always fail and results in a confusing message
"too short" if debugging enabled. With this patch, we check for
NEXTHDR_NONE before length sanity checkings are done.

Signed-off-by: Christoph Paasch <christoph.paasch@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
net/ipv6/netfilter/nf_conntrack_reasm.c diff | blob | history
Full containers within linux kernel