Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 08b5194b authored by Thomas Jacob's avatar Thomas Jacob Committed by Patrick McHardy
Browse files

netfilter: xt_iprange: Incorrect xt_iprange boundary check for IPv6



iprange_ipv6_sub was substracting 2 unsigned ints and then casting
the result to int to find out whether they are lt, eq or gt each
other, this doesn't work if the full 32 bits of each part
can be used in IPv6 addresses. Patch should remedy that without
significant performance penalties. Also number of ntohl
calls can be reduced this way (Jozsef Kadlecsik).

Signed-off-by: default avatarThomas Jacob <jacob@internet24.de>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent c71caf41
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment