Commit 1c7e47726a88303e4cfa2785f0a357bf1ceecee1

Authored by Jorge Matias
Committed by David S. Miller
1 parent 9abdcf6b6c

[NETFILTER]: xt_sctp: fix --chunk-types matching

xt_sctp uses an incorrect header offset when --chunk-types is used.

Signed-off-by: Jorge Matias <jorge.matias@motorola.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

Showing 1 changed file with 1 additions and 1 deletions Side-by-side Diff

net/netfilter/xt_sctp.c
... ... @@ -151,7 +151,7 @@
151 151 && SCCHECK(((ntohs(sh->dest) >= info->dpts[0])
152 152 && (ntohs(sh->dest) <= info->dpts[1])),
153 153 XT_SCTP_DEST_PORTS, info->flags, info->invflags)
154   - && SCCHECK(match_packet(skb, protoff,
  154 + && SCCHECK(match_packet(skb, protoff + sizeof (sctp_sctphdr_t),
155 155 info->chunkmap, info->chunk_match_type,
156 156 info->flag_info, info->flag_count,
157 157 hotdrop),