diff options
| author | David S. Miller <davem@davemloft.net> | 2015-12-22 14:54:13 -0500 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2015-12-22 14:54:13 -0500 |
| commit | a7c09ae63d1a3d623e6c96bc29be2bb3eca47e42 (patch) | |
| tree | 894434b0b5d9ca56c1a39a994ffd6f9a1a20119a /net | |
| parent | 987aaad93a4cc217b84d6caa115bffdc0959eb46 (diff) | |
| parent | d5f79b6e4d169039903cc869e16e59ad861dd479 (diff) | |
| download | op-kernel-dev-a7c09ae63d1a3d623e6c96bc29be2bb3eca47e42.zip op-kernel-dev-a7c09ae63d1a3d623e6c96bc29be2bb3eca47e42.tar.gz | |
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf
Pablo Neira Ayuso says:
====================
Netfilter fixes for net
The following patchset contains two netfilter fixes:
1) Oneliner from Florian to dump missing NFT_CT_L3PROTOCOL netlink
attribute, from Florian Westphal.
2) Another oneliner for nf_tables to use skb->protocol from the new
netdev family, we can't assume ethernet there.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
| -rw-r--r-- | net/netfilter/nf_tables_netdev.c | 2 | ||||
| -rw-r--r-- | net/netfilter/nft_ct.c | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/net/netfilter/nf_tables_netdev.c b/net/netfilter/nf_tables_netdev.c index 7b9c053..edb3502f 100644 --- a/net/netfilter/nf_tables_netdev.c +++ b/net/netfilter/nf_tables_netdev.c @@ -94,7 +94,7 @@ nft_do_chain_netdev(void *priv, struct sk_buff *skb, { struct nft_pktinfo pkt; - switch (eth_hdr(skb)->h_proto) { + switch (skb->protocol) { case htons(ETH_P_IP): nft_netdev_set_pktinfo_ipv4(&pkt, skb, state); break; diff --git a/net/netfilter/nft_ct.c b/net/netfilter/nft_ct.c index 8cbca34..9399215 100644 --- a/net/netfilter/nft_ct.c +++ b/net/netfilter/nft_ct.c @@ -366,6 +366,7 @@ static int nft_ct_get_dump(struct sk_buff *skb, const struct nft_expr *expr) goto nla_put_failure; switch (priv->key) { + case NFT_CT_L3PROTOCOL: case NFT_CT_PROTOCOL: case NFT_CT_SRC: case NFT_CT_DST: |
