diff options
| author |   Thomas Jacob <jacob@internet24.de> | 2011-01-24 21:35:36 +0100 |
|---|---|---|
| committer |   Patrick McHardy <kaber@trash.net> | 2011-01-24 21:35:36 +0100 |
| commit | 08b5194b5d6485d12ebf24cf6ee389fc55691122 (patch) | |
| tree | bda499516fd0fc9c045a17b9e14251acd84ae330 /net/ipv4/netfilter/arpt_mangle.c | |
| parent | netfilter: ctnetlink: fix missing refcount increment during dumps (diff) | |
| download | linux-dev-08b5194b5d6485d12ebf24cf6ee389fc55691122.tar.xz linux-dev-08b5194b5d6485d12ebf24cf6ee389fc55691122.zip | |
netfilter: xt_iprange: Incorrect xt_iprange boundary check for IPv6
iprange_ipv6_sub was substracting 2 unsigned ints and then casting
the result to int to find out whether they are lt, eq or gt each
other, this doesn't work if the full 32 bits of each part
can be used in IPv6 addresses. Patch should remedy that without
significant performance penalties. Also number of ntohl
calls can be reduced this way (Jozsef Kadlecsik).
Signed-off-by: Thomas Jacob <jacob@internet24.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'net/ipv4/netfilter/arpt_mangle.c')
0 files changed, 0 insertions, 0 deletions