diff options
| author | Phil Sutter <phil@nwl.cc> | 2022-11-17 17:38:52 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2022-11-24 10:24:06 +0100 |
| commit | 8a714a4f4173d6e3d32ff414fac837bc0fd6b99c (patch) | |
| tree | fb46bc2b7684a66705d71617ecf94d6df970ba6b /extensions | |
| parent | 06f0d6fdb73be00570604b33c00b1f7bf1dacaa5 (diff) | |
extensions: frag: Add comment to clarify xlate callback
Matching on fragmentation header length is ineffective in kernel, xlate
callback correctly ignores it. Add a comment as a hint for reviewers.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions')
| -rw-r--r-- | extensions/libip6t_frag.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/extensions/libip6t_frag.c b/extensions/libip6t_frag.c index 3842496e..72a43153 100644 --- a/extensions/libip6t_frag.c +++ b/extensions/libip6t_frag.c @@ -193,6 +193,8 @@ static int frag_xlate(struct xt_xlate *xl, space = " "; } + /* ignore ineffective IP6T_FRAG_LEN bit */ + if (fraginfo->flags & IP6T_FRAG_RES) { xt_xlate_add(xl, "%sfrag reserved 1", space); space = " "; |