Commit 3927ce88 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: nft_payload: access ipip payload for inner offset 



ipip is an special case, transport and inner header offset are set to
the same offset to use the upcoming inner expression for matching on
inner tunnel headers.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent c247897d

net/netfilter/nft_payload.c

+3 −0
Original line number Diff line number Diff line
@@ -132,6 +132,9 @@ static int __nft_payload_inner_offset(struct nft_pktinfo *pkt) 
		pkt->inneroff = thoff + offset;

		}

		break;

	case IPPROTO_IPIP:

		pkt->inneroff = thoff;

		break;

	default:

		return -1;

	}