icase of xt_string_info indicates case [in]sensitive matching. netfilter can find cmd.exe, Cmd.exe, cMd.exe and etc easily. Signed-off-by: Joonwoo Park <joonwpark81@xxxxxxxxx> --- include/linux/netfilter/xt_string.h | 1 + net/netfilter/xt_string.c | 2 +- 2 files changed, 2 insertions(+), 1 deletions(-) diff --git a/include/linux/netfilter/xt_string.h b/include/linux/netfilter/xt_string.h index bb21dd1..dfd347f 100644 --- a/include/linux/netfilter/xt_string.h +++ b/include/linux/netfilter/xt_string.h @@ -12,6 +12,7 @@ struct xt_string_info char pattern[XT_STRING_MAX_PATTERN_SIZE]; u_int8_t patlen; u_int8_t invert; + u_int8_t icase; /* Used internally by the kernel */ struct ts_config __attribute__((aligned(8))) *config; diff --git a/net/netfilter/xt_string.c b/net/netfilter/xt_string.c index 9508484..7c83431 100644 --- a/net/netfilter/xt_string.c +++ b/net/netfilter/xt_string.c @@ -55,7 +55,7 @@ string_mt_check(const char *tablename, const void *ip, if (conf->patlen > XT_STRING_MAX_PATTERN_SIZE) return false; ts_conf = textsearch_prepare(conf->algo, conf->pattern, conf->patlen, - 0, GFP_KERNEL, TS_AUTOLOAD); + conf->icase, GFP_KERNEL, TS_AUTOLOAD); if (IS_ERR(ts_conf)) return false; -- 1.5.4.3 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
