Commit 1c7e47726a88303e4cfa2785f0a357bf1ceecee1
Committed by
David S. Miller
1 parent
9abdcf6b6c
[NETFILTER]: xt_sctp: fix --chunk-types matching
xt_sctp uses an incorrect header offset when --chunk-types is used. Signed-off-by: Jorge Matias <jorge.matias@motorola.com> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff
net/netfilter/xt_sctp.c
... | ... | @@ -151,7 +151,7 @@ |
151 | 151 | && SCCHECK(((ntohs(sh->dest) >= info->dpts[0]) |
152 | 152 | && (ntohs(sh->dest) <= info->dpts[1])), |
153 | 153 | XT_SCTP_DEST_PORTS, info->flags, info->invflags) |
154 | - && SCCHECK(match_packet(skb, protoff, | |
154 | + && SCCHECK(match_packet(skb, protoff + sizeof (sctp_sctphdr_t), | |
155 | 155 | info->chunkmap, info->chunk_match_type, |
156 | 156 | info->flag_info, info->flag_count, |
157 | 157 | hotdrop), |