aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter/nft_payload.c
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2013-10-11 10:00:22 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2013-10-14 18:00:56 +0200
commitc54032e05bfcbb261f47aaadf8476e864e8712f4 (patch)
tree60d0012f8d4bd92c1a0e3ccc7f330174625506a8 /net/netfilter/nft_payload.c
parentnetfilter: nf_tables: add compatibility layer for x_tables (diff)
downloadlinux-dev-c54032e05bfcbb261f47aaadf8476e864e8712f4.tar.xz
linux-dev-c54032e05bfcbb261f47aaadf8476e864e8712f4.zip
netfilter: nf_tables: nft_payload: fix transport header base
We cannot use skb->transport_header since it's unset, use pkt->xt.thoff instead. Now possible using information made available through the x_tables compatibility layer. Reported-by: Eric Leblond <eric@regit.org> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_payload.c')
-rw-r--r--net/netfilter/nft_payload.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nft_payload.c b/net/netfilter/nft_payload.c
index bc8bdb2c1ba7..a2aeb318678f 100644
--- a/net/netfilter/nft_payload.c
+++ b/net/netfilter/nft_payload.c
@@ -36,7 +36,7 @@ static void nft_payload_eval(const struct nft_expr *expr,
offset = skb_network_offset(skb);
break;
case NFT_PAYLOAD_TRANSPORT_HEADER:
- offset = skb_transport_offset(skb);
+ offset = pkt->xt.thoff;
break;
default:
BUG();