Commit fd841326 authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller

[NETFILTER]: Fix ECN target TCP marking

An incorrect check made it bail out before doing anything.
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent a5ea169c
...@@ -61,10 +61,10 @@ set_ect_tcp(struct sk_buff **pskb, const struct ipt_ECN_info *einfo, int inward) ...@@ -61,10 +61,10 @@ set_ect_tcp(struct sk_buff **pskb, const struct ipt_ECN_info *einfo, int inward)
if (!tcph) if (!tcph)
return 0; return 0;
if (!(einfo->operation & IPT_ECN_OP_SET_ECE if ((!(einfo->operation & IPT_ECN_OP_SET_ECE) ||
|| tcph->ece == einfo->proto.tcp.ece) tcph->ece == einfo->proto.tcp.ece) &&
&& (!(einfo->operation & IPT_ECN_OP_SET_CWR ((!(einfo->operation & IPT_ECN_OP_SET_CWR) ||
|| tcph->cwr == einfo->proto.tcp.cwr))) tcph->cwr == einfo->proto.tcp.cwr)))
return 1; return 1;
if (!skb_ip_make_writable(pskb, (*pskb)->nh.iph->ihl*4+sizeof(*tcph))) if (!skb_ip_make_writable(pskb, (*pskb)->nh.iph->ihl*4+sizeof(*tcph)))
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment