diff options
author | Jan Engelhardt <jengelh@computergmbh.de> | 2008-01-15 02:41:34 -0500 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2008-01-28 18:02:24 -0500 |
commit | 13b0e83b5b52d1a0ab87772ecc93fe91b2740386 (patch) | |
tree | f47b4874d121012f48099ef6af1c671687e2569f /net | |
parent | 17b0d7ef658583842da75eebf8001dc617f0b52e (diff) |
[NETFILTER]: xt_pkttype: Add explicit check for IPv4
In the PACKET_LOOPBACK case, the skb data was always interpreted as
IPv4, but that is not valid for IPv6, obviously. Fix this by adding an
extra condition to check for AF_INET.
Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
-rw-r--r-- | net/netfilter/xt_pkttype.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/net/netfilter/xt_pkttype.c b/net/netfilter/xt_pkttype.c index 276244902ab5..080f3246eee7 100644 --- a/net/netfilter/xt_pkttype.c +++ b/net/netfilter/xt_pkttype.c | |||
@@ -31,7 +31,8 @@ pkttype_mt(const struct sk_buff *skb, const struct net_device *in, | |||
31 | const struct xt_pkttype_info *info = matchinfo; | 31 | const struct xt_pkttype_info *info = matchinfo; |
32 | 32 | ||
33 | if (skb->pkt_type == PACKET_LOOPBACK) | 33 | if (skb->pkt_type == PACKET_LOOPBACK) |
34 | type = ipv4_is_multicast(ip_hdr(skb)->daddr) | 34 | type = match->family == AF_INET && |
35 | ipv4_is_multicast(ip_hdr(skb)->daddr) | ||
35 | ? PACKET_MULTICAST | 36 | ? PACKET_MULTICAST |
36 | : PACKET_BROADCAST; | 37 | : PACKET_BROADCAST; |
37 | else | 38 | else |