[NETFILTER]: xt_TCPMSS: remove network triggerable WARN_ON
ipv6_skip_exthdr() returns -1 for invalid packets. don't WARN_ON that. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
This commit is contained in:
parent
3ccd86241b
commit
9dc0564e86
@ -174,10 +174,8 @@ xt_tcpmss_target6(struct sk_buff *skb,
|
|||||||
|
|
||||||
nexthdr = ipv6h->nexthdr;
|
nexthdr = ipv6h->nexthdr;
|
||||||
tcphoff = ipv6_skip_exthdr(skb, sizeof(*ipv6h), &nexthdr);
|
tcphoff = ipv6_skip_exthdr(skb, sizeof(*ipv6h), &nexthdr);
|
||||||
if (tcphoff < 0) {
|
if (tcphoff < 0)
|
||||||
WARN_ON(1);
|
|
||||||
return NF_DROP;
|
return NF_DROP;
|
||||||
}
|
|
||||||
ret = tcpmss_mangle_packet(skb, targinfo, tcphoff,
|
ret = tcpmss_mangle_packet(skb, targinfo, tcphoff,
|
||||||
sizeof(*ipv6h) + sizeof(struct tcphdr));
|
sizeof(*ipv6h) + sizeof(struct tcphdr));
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
|
Loading…
Reference in New Issue
Block a user