Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a51f42f3 authored by Eric Leblond's avatar Eric Leblond Committed by David S. Miller
Browse files

netfilter: fix tuple inversion for Node information request 



The patch fixes a typo in the inverse mapping of Node Information
request. Following draft-ietf-ipngwg-icmp-name-lookups-09, "Querier"
sends a type 139 (ICMPV6_NI_QUERY) packet to "Responder" which answer
with a type 140 (ICMPV6_NI_REPLY) packet.

Signed-off-by: default avatarEric Leblond <eric@inl.fr>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent b3df68f8

net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c

+2 −2
Original line number Diff line number Diff line
@@ -49,8 +49,8 @@ static bool icmpv6_pkt_to_tuple(const struct sk_buff *skb, 
static const u_int8_t invmap[] = {

	[ICMPV6_ECHO_REQUEST - 128]	= ICMPV6_ECHO_REPLY + 1,

	[ICMPV6_ECHO_REPLY - 128]	= ICMPV6_ECHO_REQUEST + 1,

	[ICMPV6_NI_QUERY - 128]		= ICMPV6_NI_QUERY + 1,

	[ICMPV6_NI_REPLY - 128]		= ICMPV6_NI_REPLY +1

	[ICMPV6_NI_QUERY - 128]		= ICMPV6_NI_REPLY + 1,

	[ICMPV6_NI_REPLY - 128]		= ICMPV6_NI_QUERY +1

};



static bool icmpv6_invert_tuple(struct nf_conntrack_tuple *tuple,