[NETFILTER]: xt_TCPMSS: remove network triggerable WARN_ON ipv6_skip_exthdr() returns -1 for invalid packets. don't WARN_ON that. Signed-off-by: Patrick McHardy <kaber@xxxxxxxxx> --- commit 6d3d8a9e26a4322f7f6f2601742f7a669585f338 tree 742b7f78ffcb24a6400a95db1dca419228b3e23e parent 09f345da758fca1222b0971b65b2fddbdf78bb83 author Patrick McHardy <kaber@xxxxxxxxx> Thu, 29 Nov 2007 09:04:39 +0100 committer Patrick McHardy <kaber@xxxxxxxxx> Thu, 29 Nov 2007 09:04:39 +0100 net/netfilter/xt_TCPMSS.c | 4 +--- 1 files changed, 1 insertions(+), 3 deletions(-) diff --git a/net/netfilter/xt_TCPMSS.c b/net/netfilter/xt_TCPMSS.c index 07435a6..8e76d1f 100644 --- a/net/netfilter/xt_TCPMSS.c +++ b/net/netfilter/xt_TCPMSS.c @@ -174,10 +174,8 @@ xt_tcpmss_target6(struct sk_buff *skb, nexthdr = ipv6h->nexthdr; tcphoff = ipv6_skip_exthdr(skb, sizeof(*ipv6h), &nexthdr); - if (tcphoff < 0) { - WARN_ON(1); + if (tcphoff < 0) return NF_DROP; - } ret = tcpmss_mangle_packet(skb, targinfo, tcphoff, sizeof(*ipv6h) + sizeof(struct tcphdr)); if (ret < 0) - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html