]> git.baikalelectronics.ru Git - kernel.git/commit
[NETFILTER]: nf_conntrack: Fix missing check for ICMPv6 type
authorYasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Mon, 5 Dec 2005 21:32:50 +0000 (13:32 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 5 Dec 2005 21:32:50 +0000 (13:32 -0800)
commitccfc69b881abc84f59d823e8679f1652e7ce2287
tree8b64d67f21ebab0a2127b1ca53679a47a9aca174
parent1511a16531088c1e9aa7c6766cbc0aac3ff9c20a
[NETFILTER]: nf_conntrack: Fix missing check for ICMPv6 type

This makes nf_conntrack_icmpv6 check that ICMPv6 type isn't < 128
to avoid accessing out of array valid_new[] and invmap[].

Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c