[netfilter-cvslog] r3743 - trunk/patch-o-matic-ng/nf_conntrack/linux-2.6/net/ipv6/netfilter

yasuyuki at netfilter.org yasuyuki at netfilter.org
Tue Mar 1 04:45:45 CET 2005


Author: yasuyuki at netfilter.org
Date: 2005-03-01 04:45:44 +0100 (Tue, 01 Mar 2005)
New Revision: 3743

Modified:
   trunk/patch-o-matic-ng/nf_conntrack/linux-2.6/net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c
Log:
fixed length check of the buffer from userspace



Modified: trunk/patch-o-matic-ng/nf_conntrack/linux-2.6/net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c
===================================================================
--- trunk/patch-o-matic-ng/nf_conntrack/linux-2.6/net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c	2005-02-23 16:43:29 UTC (rev 3742)
+++ trunk/patch-o-matic-ng/nf_conntrack/linux-2.6/net/ipv6/netfilter/nf_conntrack_l3proto_ipv6.c	2005-03-01 03:45:44 UTC (rev 3743)
@@ -418,9 +418,9 @@
 		return -ENOPROTOOPT;
 	}
 
-	if ((unsigned int) *len < sizeof(struct sockaddr_in)) {
+	if ((unsigned int) *len < sizeof(struct sockaddr_in6)) {
 		DEBUGP("IPV6 ORIGINAL_DST: len %u not %u\n",
-		       *len, sizeof(struct sockaddr_in));
+		       *len, sizeof(struct sockaddr_in6));
 		return -EINVAL;
 	}
 




More information about the netfilter-cvslog mailing list