diff options
| author | Eric Leblond <eric@inl.fr> | 2008-03-10 16:41:43 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-03-10 16:41:43 -0700 |
| commit | cabaa9bfb01eb4cee97ffb8a18405f4c5175d3d9 (patch) | |
| tree | d1d6e0227240b0600e61d53fe013d1adf8cff20d /net | |
| parent | b5e85dee2a5433246d5b7488918a1a0ad22c046a (diff) | |
| download | kernel-crypto-cabaa9bfb01eb4cee97ffb8a18405f4c5175d3d9.tar.gz kernel-crypto-cabaa9bfb01eb4cee97ffb8a18405f4c5175d3d9.tar.xz kernel-crypto-cabaa9bfb01eb4cee97ffb8a18405f4c5175d3d9.zip | |
[NETFILTER]: nfnetlink_queue: fix computation of allocated size for netlink skb.
Size of the netlink skb was wrongly computed because the formula was using
NLMSG_ALIGN instead of NLMSG_SPACE. NLMSG_ALIGN does not add the room for
netlink header as NLMSG_SPACE does. This was causing a failure of message
building in some cases.
On my test system, all messages for packets in range [8*k+41, 8*k+48] where k
is an integer were invalid and the corresponding packets were dropped.
Signed-off-by: Eric Leblond <eric@inl.fr>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
| -rw-r--r-- | net/netfilter/nfnetlink_queue.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nfnetlink_queue.c b/net/netfilter/nfnetlink_queue.c index 0043d3a9f87..c0cc3d3618a 100644 --- a/net/netfilter/nfnetlink_queue.c +++ b/net/netfilter/nfnetlink_queue.c @@ -224,7 +224,7 @@ nfqnl_build_packet_message(struct nfqnl_instance *queue, struct net_device *indev; struct net_device *outdev; - size = NLMSG_ALIGN(sizeof(struct nfgenmsg)) + size = NLMSG_SPACE(sizeof(struct nfgenmsg)) + nla_total_size(sizeof(struct nfqnl_msg_packet_hdr)) + nla_total_size(sizeof(u_int32_t)) /* ifindex */ + nla_total_size(sizeof(u_int32_t)) /* ifindex */ |