netfilter: nft_payload: add C-VLAN support
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 4 Nov 2019 13:41:34 +0000 (14:41 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 13 Nov 2019 09:41:42 +0000 (10:41 +0100)
commitf6ae9f120dada00abfb47313364c35118469455f
tree4e1fd4c024d8ef5e97184234a12a5cdb17922c15
parentbe193f5e21d0ec674badef9fde8eca71fb2d8546
netfilter: nft_payload: add C-VLAN support

If the encapsulated ethertype announces another inner VLAN header and
the offset falls within the boundaries of the inner VLAN header, then
adjust arithmetics to include the extra VLAN header length and fetch the
bytes from the vlan header in the skbuff data area that represents this
inner VLAN header.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_payload.c