]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_payload: work around vlan header stripping
authorFlorian Westphal <fw@strlen.de>
Mon, 17 Aug 2015 16:09:55 +0000 (18:09 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 19 Aug 2015 06:39:53 +0000 (08:39 +0200)
commit6d529a452bd6b653bc08ca7037b398ee999b6f4e
tree31e95677b99758f856b9a78f698037ba723e28a3
parentdc91c7791d71f752b5b82ba7286ccb42e5ef8ae5
netfilter: nft_payload: work around vlan header stripping

make payload expression aware of the fact that VLAN offload may have
removed a vlan header.

When we encounter tagged skb, transparently insert the tag into the
register so that vlan header matching can work without userspace being
aware of offload features.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_payload.c