# This is a BitKeeper generated diff -Nru style patch. # # ChangeSet # 2005/01/25 03:56:48+01:00 gandalf@wlug.westbo.se # [NETFILTER]: Fix SNAT/DNAT target size checks # # This patch fixes two size checks in the checkentry() for SNAT and DNAT # targets. The patch to remove support for multiple ranges forgot to use # IPT_ALIGN(). This isn't a problem on x86 but other archs like parisc # are affected and thus can't add any SNAT/DNAT rules. # # Signed-off-by: Martin Josefsson # Signed-off-by: Patrick McHardy # # net/ipv4/netfilter/ip_nat_rule.c # 2005/01/25 03:56:39+01:00 gandalf@wlug.westbo.se +2 -2 # [NETFILTER]: Fix SNAT/DNAT target size checks # # This patch fixes two size checks in the checkentry() for SNAT and DNAT # targets. The patch to remove support for multiple ranges forgot to use # IPT_ALIGN(). This isn't a problem on x86 but other archs like parisc # are affected and thus can't add any SNAT/DNAT rules. # # Signed-off-by: Martin Josefsson # Signed-off-by: Patrick McHardy # diff -Nru a/net/ipv4/netfilter/ip_nat_rule.c b/net/ipv4/netfilter/ip_nat_rule.c --- a/net/ipv4/netfilter/ip_nat_rule.c 2005-01-25 04:37:00 +01:00 +++ b/net/ipv4/netfilter/ip_nat_rule.c 2005-01-25 04:37:00 +01:00 @@ -181,7 +181,7 @@ return 0; } - if (targinfosize != sizeof(struct ip_nat_multi_range_compat)) { + if (targinfosize != IPT_ALIGN(sizeof(struct ip_nat_multi_range_compat))) { DEBUGP("SNAT: Target size %u wrong for %u ranges\n", targinfosize, mr->rangesize); return 0; @@ -214,7 +214,7 @@ return 0; } - if (targinfosize != sizeof(struct ip_nat_multi_range_compat)) { + if (targinfosize != IPT_ALIGN(sizeof(struct ip_nat_multi_range_compat))) { DEBUGP("DNAT: Target size %u wrong for %u ranges\n", targinfosize, mr->rangesize); return 0;