提交 45241a7a 编写于 作者: P Patrick McHardy 提交者: David S. Miller

[NETFILTER]: nf_nat_sip: don't drop short packets

Don't drop packets shorter than "SIP/2.0", just ignore them. Keep-alives
can validly be shorter for example.
Signed-off-by: NPatrick McHardy <kaber@trash.net>
Signed-off-by: NDavid S. Miller <davem@davemloft.net>
上级 aa584eda
...@@ -104,7 +104,7 @@ static unsigned int ip_nat_sip(struct sk_buff **pskb, ...@@ -104,7 +104,7 @@ static unsigned int ip_nat_sip(struct sk_buff **pskb,
dataoff = ip_hdrlen(*pskb) + sizeof(struct udphdr); dataoff = ip_hdrlen(*pskb) + sizeof(struct udphdr);
datalen = (*pskb)->len - dataoff; datalen = (*pskb)->len - dataoff;
if (datalen < sizeof("SIP/2.0") - 1) if (datalen < sizeof("SIP/2.0") - 1)
return NF_DROP; return NF_ACCEPT;
addr_map_init(ct, &map); addr_map_init(ct, &map);
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册