aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--net/ipv4/icmp.c2
-rw-r--r--net/ipv6/icmp.c2
2 files changed, 2 insertions, 2 deletions
diff --git a/net/ipv4/icmp.c b/net/ipv4/icmp.c
index 3c41a6f7e6e..c41f3cc4fba 100644
--- a/net/ipv4/icmp.c
+++ b/net/ipv4/icmp.c
@@ -977,7 +977,7 @@ int icmp_rcv(struct sk_buff *skb)
977 struct icmphdr *icmph; 977 struct icmphdr *icmph;
978 struct rtable *rt = (struct rtable *)skb->dst; 978 struct rtable *rt = (struct rtable *)skb->dst;
979 979
980 if (!xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb) && 980 if (!xfrm4_policy_check(NULL, XFRM_POLICY_IN, skb) && skb->sp &&
981 skb->sp->xvec[skb->sp->len - 1]->props.flags & XFRM_STATE_ICMP) { 981 skb->sp->xvec[skb->sp->len - 1]->props.flags & XFRM_STATE_ICMP) {
982 int nh; 982 int nh;
983 983
diff --git a/net/ipv6/icmp.c b/net/ipv6/icmp.c
index c0bea7bfaa8..1659d2fb01f 100644
--- a/net/ipv6/icmp.c
+++ b/net/ipv6/icmp.c
@@ -644,7 +644,7 @@ static int icmpv6_rcv(struct sk_buff *skb)
644 struct icmp6hdr *hdr; 644 struct icmp6hdr *hdr;
645 int type; 645 int type;
646 646
647 if (xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb) && 647 if (!xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb) && skb->sp &&
648 skb->sp->xvec[skb->sp->len - 1]->props.flags & XFRM_STATE_ICMP) { 648 skb->sp->xvec[skb->sp->len - 1]->props.flags & XFRM_STATE_ICMP) {
649 int nh; 649 int nh;
650 650