提交 0cafa392 编写于 作者: T Taehee Yoo 提交者: Pablo Neira Ayuso

netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v6_unreach

In order to allocate icmpv6 skb, sizeof(struct ipv6hdr) should be used.
Signed-off-by: NTaehee Yoo <ap420073@gmail.com>
Signed-off-by: NPablo Neira Ayuso <pablo@netfilter.org>
上级 31875d49
...@@ -261,7 +261,7 @@ static void nft_reject_br_send_v6_unreach(struct net *net, ...@@ -261,7 +261,7 @@ static void nft_reject_br_send_v6_unreach(struct net *net,
if (!reject6_br_csum_ok(oldskb, hook)) if (!reject6_br_csum_ok(oldskb, hook))
return; return;
nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct icmp6hdr) + nskb = alloc_skb(sizeof(struct ipv6hdr) + sizeof(struct icmp6hdr) +
LL_MAX_HEADER + len, GFP_ATOMIC); LL_MAX_HEADER + len, GFP_ATOMIC);
if (!nskb) if (!nskb)
return; return;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册