Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 27ecb1ff authored by Jan Engelhardt's avatar Jan Engelhardt Committed by David S. Miller
Browse files

[NETFILTER]: xt_iprange: fix subtraction-based comparison 



The host address parts need to be converted to host-endian first
before arithmetic makes any sense on them.

Signed-off-by: default avatarJan Engelhardt <jengelh@computergmbh.de>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 7d9904c2

net/netfilter/xt_iprange.c

+1 −1
Original line number Diff line number Diff line
@@ -102,7 +102,7 @@ iprange_ipv6_sub(const struct in6_addr *a, const struct in6_addr *b) 
	int r;



	for (i = 0; i < 4; ++i) {

		r = (__force u32)a->s6_addr32[i] - (__force u32)b->s6_addr32[i];

		r = ntohl(a->s6_addr32[i]) - ntohl(b->s6_addr32[i]);

		if (r != 0)

			return r;

	}