[NETFILTER]: xt_pkttype: Add explicit check for IPv4
In the PACKET_LOOPBACK case, the skb data was always interpreted as IPv4, but that is not valid for IPv6, obviously. Fix this by adding an extra condition to check for AF_INET. Signed-off-by: Jan Engelhardt <jengelh@computergmbh.de> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
17b0d7ef65
commit
13b0e83b5b
1 changed files with 2 additions and 1 deletions
|
@ -31,7 +31,8 @@ pkttype_mt(const struct sk_buff *skb, const struct net_device *in,
|
||||||
const struct xt_pkttype_info *info = matchinfo;
|
const struct xt_pkttype_info *info = matchinfo;
|
||||||
|
|
||||||
if (skb->pkt_type == PACKET_LOOPBACK)
|
if (skb->pkt_type == PACKET_LOOPBACK)
|
||||||
type = ipv4_is_multicast(ip_hdr(skb)->daddr)
|
type = match->family == AF_INET &&
|
||||||
|
ipv4_is_multicast(ip_hdr(skb)->daddr)
|
||||||
? PACKET_MULTICAST
|
? PACKET_MULTICAST
|
||||||
: PACKET_BROADCAST;
|
: PACKET_BROADCAST;
|
||||||
else
|
else
|
||||||
|
|
Reference in a new issue