diff options
| author |   Taehee Yoo <ap420073@gmail.com> | 2018-06-01 19:12:28 +0900 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2018-06-04 18:28:03 +0200 |
| commit | 0cafa3926f0d8d72a2a814843f4db8cfef66d4ce (patch) | |
| tree | 7d27a9ec2fc4344c282408a47e83dba6316e53ad /net/bridge | |
| parent | ipvs: register conntrack hooks for ftp (diff) | |
| download | linux-dev-0cafa3926f0d8d72a2a814843f4db8cfef66d4ce.tar.xz linux-dev-0cafa3926f0d8d72a2a814843f4db8cfef66d4ce.zip | |
netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v6_unreach
In order to allocate icmpv6 skb, sizeof(struct ipv6hdr) should be used.
Signed-off-by: Taehee Yoo <ap420073@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/bridge')
| -rw-r--r-- | net/bridge/netfilter/nft_reject_bridge.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/bridge/netfilter/nft_reject_bridge.c b/net/bridge/netfilter/nft_reject_bridge.c index eaf05de37f75..6de981270566 100644 --- a/net/bridge/netfilter/nft_reject_bridge.c +++ b/net/bridge/netfilter/nft_reject_bridge.c @@ -261,7 +261,7 @@ static void nft_reject_br_send_v6_unreach(struct net *net, if (!reject6_br_csum_ok(oldskb, hook)) return; - nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct icmp6hdr) + + nskb = alloc_skb(sizeof(struct ipv6hdr) + sizeof(struct icmp6hdr) + LL_MAX_HEADER + len, GFP_ATOMIC); if (!nskb) return; |