]> err.no Git - linux-2.6/commit
[NETFILTER]: nf_conntrack: Fix missing check for ICMPv6 type
authorYasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Mon, 5 Dec 2005 21:32:50 +0000 (13:32 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 5 Dec 2005 21:32:50 +0000 (13:32 -0800)
commitf16c910724250c1af0f53111b4c76505000819f6
tree8b64d67f21ebab0a2127b1ca53679a47a9aca174
parent8d1ca69984ed1e5930c0537b8f606c54007d7319
[NETFILTER]: nf_conntrack: Fix missing check for ICMPv6 type

This makes nf_conntrack_icmpv6 check that ICMPv6 type isn't < 128
to avoid accessing out of array valid_new[] and invmap[].

Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c