Commit 0cafa392 authored by Taehee Yoo's avatar Taehee Yoo Committed by Pablo Neira Ayuso
Browse files

netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v6_unreach 



In order to allocate icmpv6 skb, sizeof(struct ipv6hdr) should be used.

Signed-off-by: default avatarTaehee Yoo <ap420073@gmail.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 31875d49

net/bridge/netfilter/nft_reject_bridge.c

+1 −1
Original line number Diff line number Diff line
@@ -261,7 +261,7 @@ static void nft_reject_br_send_v6_unreach(struct net *net, 
	if (!reject6_br_csum_ok(oldskb, hook))

		return;



	nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct icmp6hdr) +

	nskb = alloc_skb(sizeof(struct ipv6hdr) + sizeof(struct icmp6hdr) +

			 LL_MAX_HEADER + len, GFP_ATOMIC);

	if (!nskb)

		return;

CRA Git | Maintained and supported by SUSTech CRA and CCSE