diff options
| author |   Jeremy Sowden <jeremy@azazel.net> | 2023-03-07 23:22:57 +0000 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2023-03-08 12:26:31 +0100 |
| commit | ec2c5917eb858428b2083d1c74f445aabbe8316b (patch) | |
| tree | 59777bead2482e209403f303197f4c466e6d43e1 /net | |
| parent | netfilter: nft_nat: correct length for loading protocol registers (diff) | |
| download | wireguard-linux-ec2c5917eb858428b2083d1c74f445aabbe8316b.tar.xz wireguard-linux-ec2c5917eb858428b2083d1c74f445aabbe8316b.zip | |
netfilter: nft_masq: correct length for loading protocol registers
The values in the protocol registers are two bytes wide. However, when
parsing the register loads, the code currently uses the larger 16-byte
size of a `union nf_inet_addr`. Change it to use the (correct) size of
a `union nf_conntrack_man_proto` instead.
Fixes: 8a6bf5da1aef ("netfilter: nft_masq: support port range")
Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
| -rw-r--r-- | net/netfilter/nft_masq.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nft_masq.c b/net/netfilter/nft_masq.c index e55e455275c4..9544c2f16998 100644 --- a/net/netfilter/nft_masq.c +++ b/net/netfilter/nft_masq.c @@ -43,7 +43,7 @@ static int nft_masq_init(const struct nft_ctx *ctx, const struct nft_expr *expr, const struct nlattr * const tb[]) { - u32 plen = sizeof_field(struct nf_nat_range, min_addr.all); + u32 plen = sizeof_field(struct nf_nat_range, min_proto.all); struct nft_masq *priv = nft_expr_priv(expr); int err; |