linux/net/ipv6/netfilter
Yasuyuki Kozakai f16c910724 [NETFILTER]: nf_conntrack: Fix missing check for ICMPv6 type
This makes nf_conntrack_icmpv6 check that ICMPv6 type isn't < 128
to avoid accessing out of array valid_new[] and invmap[].

Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2005-12-05 13:32:50 -08:00
..
ip6_queue.c
ip6_tables.c
ip6t_ah.c
ip6t_dst.c
ip6t_esp.c
ip6t_eui64.c
ip6t_frag.c
ip6t_hbh.c
ip6t_hl.c
ip6t_HL.c
ip6t_ipv6header.c
ip6t_length.c
ip6t_limit.c
ip6t_LOG.c
ip6t_mac.c
ip6t_mark.c
ip6t_MARK.c
ip6t_multiport.c
ip6t_NFQUEUE.c
ip6t_owner.c
ip6t_physdev.c
ip6t_REJECT.c
ip6t_rt.c
ip6table_filter.c
ip6table_mangle.c
ip6table_raw.c
Kconfig
Makefile
nf_conntrack_l3proto_ipv6.c
nf_conntrack_proto_icmpv6.c
nf_conntrack_reasm.c