diff options
| author | Florian Westphal <fw@strlen.de> | 2026-06-18 10:49:24 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2026-06-21 00:18:27 +0200 |
| commit | af8d6ae09c0a5f8b8a0d5680203c74b3c1daa85b (patch) | |
| tree | f547a52e8f54dff75208d2bbe3024c7711b5d5af /include/uapi/linux | |
| parent | e409c23c2d0630f3b95efd12428b2e58800b7645 (diff) | |
netfilter: nf_reject: skip iphdr options when looking for icmp header
Not a big deal but this hould have used the real ip header length and not the
base header size. As-is, if there are options then
nf_skb_is_icmp_unreach() result will be random.
Fixes: db99b2f2b3e2 ("netfilter: nf_reject: don't reply to icmp error messages")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/uapi/linux')
0 files changed, 0 insertions, 0 deletions