Skip to contentSkip to conversation

: Only match packets with full ESP header (like in 2.5)

PATCH New Patrick McHardy 1 participant 1 message Jul 21, 2003

Subsystems (2)
lore
Share & tools
lore
#0 lore raw

PATCH 1/1 : Only match packets with full ESP header (like in 2.5)

This patch is pretty useless, it just adds an unused field to struct esphdr so behaviour wrt. incomplete headers is identical to 2.5.

Best regards,
Patrick

# This is a BitKeeper generated patch for the following project:
# Project Name: Linux kernel tree
# This patch format is intended for GNU patch command version 2.5 or higher. # This patch includes the following deltas:
# ChangeSet 1.1022 -> 1.1023
# net/ipv4/netfilter/ipt_esp.c 1.1 -> 1.2
#
# The following is the BitKeeper ChangeSet Log
# --------------------------------------------
# 03/07/21 [email protected] 1.1023
# [NETFILTER]: Only match packets with full ESP header (like in 2.5) # --------------------------------------------
#

net/ipv4/netfilter/ipt_esp.c +1 -0
diff -Nru a/net/ipv4/netfilter/ipt_esp.c b/net/ipv4/netfilter/ipt_esp.c
@@ -16,6 +16,7 @@
 
 struct esphdr {
 	__u32   spi;
+	__u32   seq_no;
 };
 
 /* Returns 1 if the spi is matched by the range, 0 otherwise */