X-Git-Url: http://git.rot13.org/?a=blobdiff_plain;f=net%2Fnetfilter%2Fxt_length.c;h=57bcfacde5941ede1b2a30fcaec8398a898d035e;hb=1d93a9cbad608f6398ba6c5b588c504ccd35a2ca;hp=67fd30d9f303232bfd64bfda54c0e7746b2adc47;hpb=0cd43f83d381c4246a08cd775834833d6fd64805;p=powerpc.git diff --git a/net/netfilter/xt_length.c b/net/netfilter/xt_length.c index 67fd30d9f3..57bcfacde5 100644 --- a/net/netfilter/xt_length.c +++ b/net/netfilter/xt_length.c @@ -20,7 +20,7 @@ MODULE_LICENSE("GPL"); MODULE_ALIAS("ipt_length"); MODULE_ALIAS("ip6t_length"); -static int +static bool match(const struct sk_buff *skb, const struct net_device *in, const struct net_device *out, @@ -28,15 +28,15 @@ match(const struct sk_buff *skb, const void *matchinfo, int offset, unsigned int protoff, - int *hotdrop) + bool *hotdrop) { const struct xt_length_info *info = matchinfo; - u_int16_t pktlen = ntohs(skb->nh.iph->tot_len); - + u_int16_t pktlen = ntohs(ip_hdr(skb)->tot_len); + return (pktlen >= info->min && pktlen <= info->max) ^ info->invert; } -static int +static bool match6(const struct sk_buff *skb, const struct net_device *in, const struct net_device *out, @@ -44,11 +44,12 @@ match6(const struct sk_buff *skb, const void *matchinfo, int offset, unsigned int protoff, - int *hotdrop) + bool *hotdrop) { const struct xt_length_info *info = matchinfo; - u_int16_t pktlen = ntohs(skb->nh.ipv6h->payload_len) + sizeof(struct ipv6hdr); - + const u_int16_t pktlen = (ntohs(ipv6_hdr(skb)->payload_len) + + sizeof(struct ipv6hdr)); + return (pktlen >= info->min && pktlen <= info->max) ^ info->invert; }