summaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorTaehee Yoo <ap420073@gmail.com>2018-06-01 19:12:28 +0900
committerPablo Neira Ayuso <pablo@netfilter.org>2018-06-04 18:28:03 +0200
commit0cafa3926f0d8d72a2a814843f4db8cfef66d4ce (patch)
tree7d27a9ec2fc4344c282408a47e83dba6316e53ad /net
parent31875d4970baa02e08b719fdfea6f43e9e2f7e77 (diff)
downloadlinux-stable-0cafa3926f0d8d72a2a814843f4db8cfef66d4ce.tar.gz
linux-stable-0cafa3926f0d8d72a2a814843f4db8cfef66d4ce.tar.bz2
linux-stable-0cafa3926f0d8d72a2a814843f4db8cfef66d4ce.zip
netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v6_unreach
In order to allocate icmpv6 skb, sizeof(struct ipv6hdr) should be used. Signed-off-by: Taehee Yoo <ap420073@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
-rw-r--r--net/bridge/netfilter/nft_reject_bridge.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/bridge/netfilter/nft_reject_bridge.c b/net/bridge/netfilter/nft_reject_bridge.c
index eaf05de37f75..6de981270566 100644
--- a/net/bridge/netfilter/nft_reject_bridge.c
+++ b/net/bridge/netfilter/nft_reject_bridge.c
@@ -261,7 +261,7 @@ static void nft_reject_br_send_v6_unreach(struct net *net,
if (!reject6_br_csum_ok(oldskb, hook))
return;
- nskb = alloc_skb(sizeof(struct iphdr) + sizeof(struct icmp6hdr) +
+ nskb = alloc_skb(sizeof(struct ipv6hdr) + sizeof(struct icmp6hdr) +
LL_MAX_HEADER + len, GFP_ATOMIC);
if (!nskb)
return;