forked from Minki/linux
[NETFILTER]: ctnetlink: remove bogus checks in ICMP protocol at dumping
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
d695aa8a1f
commit
684f7b296c
@ -279,10 +279,6 @@ static int icmp_tuple_to_nfattr(struct sk_buff *skb,
|
|||||||
NFA_PUT(skb, CTA_PROTO_ICMP_CODE, sizeof(u_int8_t),
|
NFA_PUT(skb, CTA_PROTO_ICMP_CODE, sizeof(u_int8_t),
|
||||||
&t->dst.u.icmp.code);
|
&t->dst.u.icmp.code);
|
||||||
|
|
||||||
if (t->dst.u.icmp.type >= sizeof(valid_new)
|
|
||||||
|| !valid_new[t->dst.u.icmp.type])
|
|
||||||
return -EINVAL;
|
|
||||||
|
|
||||||
return 0;
|
return 0;
|
||||||
|
|
||||||
nfattr_failure:
|
nfattr_failure:
|
||||||
|
Loading…
Reference in New Issue
Block a user