| commit | 802169a4b0f71d25a0f798a9c0657a565b1e79bc | |
| author | Patrick McHardy <kaber@trash.net> | |
| Thu, 10 May 2007 21:17:36 +0000 (10 14:17 -0700) | ||
| committer | David S. Miller <davem@sunset.davemloft.net> | |
| Fri, 11 May 2007 06:47:59 +0000 (10 23:47 -0700) | ||
| tree | ec2f1f9906463da2c00d351b2bfb6814a57246c2 | treesnapshot (tar.gz zip) |
| parent | 4a176c1a61ed279f4d98b6adf9be84fb905d921c | commitdiff |
[NETFILTER]: iptable_raw: ignore short packets sent by SOCK_RAW sockets
iptables matches and targets expect packets to have at least a full
IP header and a valid header length. Ignore packets sent through
raw sockets for which this isn't true as in the other tables.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
iptables matches and targets expect packets to have at least a full
IP header and a valid header length. Ignore packets sent through
raw sockets for which this isn't true as in the other tables.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/ipv4/netfilter/iptable_raw.c | diffblobblamehistory |