Since fw->arp.arhln is of type __u8, its value will never become less than zero. Signed-off-by: Phil Sutter <phil@xxxxxx> --- iptables/nft-arp.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/iptables/nft-arp.c b/iptables/nft-arp.c index 7332b6193f16a..b8e8982653bb3 100644 --- a/iptables/nft-arp.c +++ b/iptables/nft-arp.c @@ -330,9 +330,6 @@ static void nft_arp_parse_payload(struct nft_xt_ctx *ctx, fw->arp.invflags |= ARPT_INV_ARPOP; break; default: - if (fw->arp.arhln < 0) - break; - if (ctx->payload.offset == sizeof(struct arphdr) + fw->arp.arhln) { get_cmp_data(e, &addr, sizeof(addr), &inv); -- 2.18.0