diff options
| author |   Alexey Kashavkin <akashavkin@gmail.com> | 2025-03-02 00:14:36 +0300 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2025-03-13 10:02:39 +0100 |
| commit | 6edd78af9506bb182518da7f6feebd75655d9a0e (patch) | |
| tree | 51283422b98da24ad7a9daa2f57d356e1e99e977 /net/lapb/lapb_out.c | |
| parent | ipvs: prevent integer overflow in do_ip_vs_get_ctl() (diff) | |
| download | wireguard-linux-6edd78af9506bb182518da7f6feebd75655d9a0e.tar.xz wireguard-linux-6edd78af9506bb182518da7f6feebd75655d9a0e.zip | |
netfilter: nft_exthdr: fix offset with ipv4_find_option()
There is an incorrect calculation in the offset variable which causes
the nft_skb_copy_to_reg() function to always return -EFAULT. Adding the
start variable is redundant. In the __ip_options_compile() function the
correct offset is specified when finding the function. There is no need
to add the size of the iphdr structure to the offset.
Fixes: dbb5281a1f84 ("netfilter: nf_tables: add support for matching IPv4 options")
Signed-off-by: Alexey Kashavkin <akashavkin@gmail.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/lapb/lapb_out.c')
0 files changed, 0 insertions, 0 deletions