Commit d4c38fa8 authored Jan 26, 2013 by YOSHIFUJI Hideaki / 吉藤英明 Committed by Pablo Neira Ayuso Feb 07, 2013

netfilter: ip6t_NPT: Fix prefix mangling



Make sure only the bits that are part of the prefix are mangled.

Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent f5271fff

net/ipv6/netfilter/ip6t_NPT.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -51,7 +51,7 @@ static bool ip6t_npt_map_pfx(const struct ip6t_npt_tginfo *npt,

		idx = i / 32;
		addr->s6_addr32[idx] &= mask;
		addr->s6_addr32[idx] \|= npt->dst_pfx.in6.s6_addr32[idx];
		addr->s6_addr32[idx] \|= ~mask & npt->dst_pfx.in6.s6_addr32[idx];
		}

		if (pfx_len <= 48)