OSDN Git Service
(root)
/
uclinux-h8
/
linux.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
4017a7e
)
netfilter: xt_TPROXY: fix invflags check in tproxy_tg6_check()
author
Pablo Neira Ayuso
<pablo@netfilter.org>
Fri, 20 Mar 2015 12:56:06 +0000
(13:56 +0100)
committer
Pablo Neira Ayuso
<pablo@netfilter.org>
Fri, 20 Mar 2015 13:35:33 +0000
(14:35 +0100)
We have to check for IP6T_INV_PROTO in invflags, instead of flags.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Acked-by: Balazs Scheidler <bazsi@balabit.hu>
net/netfilter/xt_TPROXY.c
patch
|
blob
|
history
diff --git
a/net/netfilter/xt_TPROXY.c
b/net/netfilter/xt_TPROXY.c
index
ef8a926
..
50e1e5a
100644
(file)
--- a/
net/netfilter/xt_TPROXY.c
+++ b/
net/netfilter/xt_TPROXY.c
@@
-513,8
+513,8
@@
static int tproxy_tg6_check(const struct xt_tgchk_param *par)
{
const struct ip6t_ip6 *i = par->entryinfo;
- if ((i->proto == IPPROTO_TCP || i->proto == IPPROTO_UDP)
-
&& !(i->
flags & IP6T_INV_PROTO))
+ if ((i->proto == IPPROTO_TCP || i->proto == IPPROTO_UDP)
&&
+
!(i->inv
flags & IP6T_INV_PROTO))
return 0;
pr_info("Can be used only in combination with "