Skip to contentSkip to conversation

netfilter: ip6t_NPT: Do not mix two prefixes.

RFC PATCH Applied YOSHIFUJI Hideaki 2 participants 2 messages Jan 26, 2013 – Feb 7, 2013

Subsystems (2)
Networking netfilter
lore
Share & tools
lore

YOSHIFUJI Hideaki

author
#0 lore raw

RFC PATCH 4/4 netfilter: ip6t_NPT: Do not mix two prefixes.

Signed-off-by YOSHIFUJI Hideaki <[email protected]>
---
 net/ipv6/netfilter/ip6t_NPT.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
net/ipv6/netfilter/ip6t_NPT.c +1 -1
index 7d23d22..74e171d 100644
@@ -56,7 +56,7 @@ static bool ip6t_npt_map_pfx(const struct ip6t_npt_tginfo *npt,
 
 		idx = i / 32;
 		addr->s6_addr32[idx] &= mask;
-		addr->s6_addr32[idx] |= npt->dst_pfx.in6.s6_addr32[idx];
+		addr->s6_addr32[idx] |= ~mask & npt->dst_pfx.in6.s6_addr32[idx];
 	}
 
 	if (pfx_len <= 48)
Signature · 1 line
1.7.9.5