]> err.no Git - linux-2.6/commit
[IPSEC]: Fix reversed ICMP6 policy check
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 13 Dec 2007 02:47:48 +0000 (18:47 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:57:41 +0000 (14:57 -0800)
commit7233b9f33e72ca477034ff5cf901c89efba3a5bc
tree91f3ca124a86cd0be9ac068a98e895923e4c03f8
parent2ba582b782071c038b312ea330d3090a39f3c66a
[IPSEC]: Fix reversed ICMP6 policy check

The policy check I added for ICMP on IPv6 is reversed.  This
patch fixes that.

It also adds an skb->sp check so that unprotected packets that
fail the policy check do not crash the machine.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/icmp.c
net/ipv6/icmp.c