]> www.infradead.org Git - users/hch/misc.git/commit
netfilter: nft_exthdr: fix offset with ipv4_find_option()
authorAlexey Kashavkin <akashavkin@gmail.com>
Sat, 1 Mar 2025 21:14:36 +0000 (00:14 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 13 Mar 2025 09:02:39 +0000 (10:02 +0100)
commit6edd78af9506bb182518da7f6feebd75655d9a0e
tree51283422b98da24ad7a9daa2f57d356e1e99e977
parent80b78c39eb86e6b55f56363b709eb817527da5aa
netfilter: nft_exthdr: fix offset with ipv4_find_option()

There is an incorrect calculation in the offset variable which causes
the nft_skb_copy_to_reg() function to always return -EFAULT. Adding the
start variable is redundant. In the __ip_options_compile() function the
correct offset is specified when finding the function. There is no need
to add the size of the iphdr structure to the offset.

Fixes: dbb5281a1f84 ("netfilter: nf_tables: add support for matching IPv4 options")
Signed-off-by: Alexey Kashavkin <akashavkin@gmail.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_exthdr.c