Commit aa47e42c authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso

netfilter: nf_tables: use skb->protocol instead of assuming ethernet header

Otherwise we may end up with incorrect network and transport header for
other protocols.
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 73796d8b
...@@ -94,7 +94,7 @@ nft_do_chain_netdev(void *priv, struct sk_buff *skb, ...@@ -94,7 +94,7 @@ nft_do_chain_netdev(void *priv, struct sk_buff *skb,
{ {
struct nft_pktinfo pkt; struct nft_pktinfo pkt;
switch (eth_hdr(skb)->h_proto) { switch (skb->protocol) {
case htons(ETH_P_IP): case htons(ETH_P_IP):
nft_netdev_set_pktinfo_ipv4(&pkt, skb, state); nft_netdev_set_pktinfo_ipv4(&pkt, skb, state);
break; break;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment