]> bbs.cooldavid.org Git - net-next-2.6.git/commit - net/ipv4/icmp.c
git://bbs.cooldavid.org / net-next-2.6.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: bb72845) | patch
[IPSEC]: Do not let packets pass when ICMP flag is off
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 13 Dec 2007 02:54:16 +0000 (18:54 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:57:43 +0000 (14:57 -0800)
commitaebcf82c1fe9231be5cb4f9c1362d5db39e7d7b2
treef164bead26b172ee82d6eaa81a0148d980985bcetree | snapshot (tar.bz2 tar.gz zip)
parentbb72845e699d3c84e5f861b51db686107a51dea5commit | diff
[IPSEC]: Do not let packets pass when ICMP flag is off

This fixes a logical error in ICMP policy checks which lets
packets through if the state ICMP flag is off.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/icmp.c diff | blob | blame | history
net/ipv6/icmp.c diff | blob | blame | history
Clone of davem's net-next-2.6 tree