Techwizz/kernel-fxtec-pro1x
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

netfilter: xt_hashlimit: use proto_ports_offset() to support AH message

Browse source 
Signed-off-by: Changli Gao <xiaosuo@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
Changli Gao 2010-08-17 19:06:39 +00:00 committed by David S. Miller
parent 3d04ebb6ab
commit aca071c1c1
1 changed files with 5 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
net/netfilter/xt_hashlimit.c
View file

@ -448,6 +448,7 @@ hashlimit_init_dst(const struct xt_hashlimit_htable *hinfo,
{ {
__be16 _ports[2], *ports; __be16 _ports[2], *ports;
u8 nexthdr; u8 nexthdr;
int poff;
memset(dst, 0, sizeof(*dst)); memset(dst, 0, sizeof(*dst));
@ -492,19 +493,13 @@ hashlimit_init_dst(const struct xt_hashlimit_htable *hinfo,
return 0; return 0;
} }
switch (nexthdr) { poff = proto_ports_offset(nexthdr);
case IPPROTO_TCP: if (poff >= 0) {
case IPPROTO_UDP: ports = skb_header_pointer(skb, protoff + poff, sizeof(_ports),
case IPPROTO_UDPLITE:
case IPPROTO_SCTP:
case IPPROTO_DCCP:
ports = skb_header_pointer(skb, protoff, sizeof(_ports),
&_ports); &_ports);
break; } else {
default:
_ports[0] = _ports[1] = 0; _ports[0] = _ports[1] = 0;
ports = _ports; ports = _ports;
break;
} }
if (!ports) if (!ports)
return -1; return -1;