On Tue, Oct 11, 2016 at 10:22:27PM +0800, Liping Zhang wrote: > From: Liping Zhang <liping.zhang@xxxxxxxxxxxxxx> > > If ipv4 packet is truncated, we should not try to dereference the > iph pointer. Otherwise, if the user add such iptables rules > "-j NFLOG --nflog-size 0", we will dereference the NULL pointer > and crash may happen. With Eric's permission, I'm applying this. Thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html