]> git.baikalelectronics.ru Git - kernel.git/commit
[NETFILTER]: nf_conntrack_ftp: fix newline sequence number calculation
authorPatrick McHardy <kaber@trash.net>
Thu, 24 May 2007 23:41:50 +0000 (16:41 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 24 May 2007 23:41:50 +0000 (16:41 -0700)
commitab2f9b2b0a6e48305c71351d6732a26198575bc8
tree756282cad7ea20d2df257633c799d0b6baceba46
parent7d41918ca995cc049a64373d62fdfe653a5923f3
[NETFILTER]: nf_conntrack_ftp: fix newline sequence number calculation

When the packet size is changed by the FTP NAT helper, the connection
tracking helper adjusts the sequence number of the newline character
by the size difference. This is wrong because NAT sequence number
adjustment happens after helpers are called, so the unadjusted number
is compared to the already adjusted one.

Based on report by YU, Haitao <yuhaitao@tsinghua.org.cn>

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/netfilter/nf_conntrack_ftp.h
net/ipv4/netfilter/nf_nat_ftp.c
net/netfilter/nf_conntrack_ftp.c