projects / kernel / kernel-generic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e55f1bc) | patch
[NETFILTER]: Fix ip6t_policy address matching
authorPatrick McHardy <kaber@trash.net>
Sat, 4 Feb 2006 10:17:55 +0000 (02:17 -0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Sun, 5 Feb 2006 07:51:27 +0000 (23:51 -0800)
commit878c41ce5747e1b417bdd92a694c33dc4bd6ec02
treefac206db8511afd50f8486dd8de8a4a3a7528c74tree | snapshot
parente55f1bc5dcb60a47764f6eabd1501d2cb98fb2c4commit | diff
[NETFILTER]: Fix ip6t_policy address matching

Fix two bugs in ip6t_policy address matching:
- misorder arguments to ip6_masked_addrcmp, mask must be the second argument
- inversion incorrectly applied to the entire expression instead of just
  the address comparison

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/netfilter/ip6t_policy.c diff | blob | history
Domain: System / Uncategorized;