From 12c57417585e9ddafd52135cb770823cdb8d44a1 Mon Sep 17 00:00:00 2001 From: Duncan Roe Date: Sun, 24 Nov 2019 13:33:10 +1100 Subject: src: Fix test for IPv6 header Updated: src/extra/ipv6.c: Only test the first 4 bits of the putative IPv6 header to be 6, since all the other bits are up for grabs. (I have seen nonzero Flow Control on the local interface and RFC2474 & RFC3168 document Traffic Class use). Signed-off-by: Duncan Roe Signed-off-by: Pablo Neira Ayuso --- src/extra/ipv6.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/extra') diff --git a/src/extra/ipv6.c b/src/extra/ipv6.c index af307d6..f685b3b 100644 --- a/src/extra/ipv6.c +++ b/src/extra/ipv6.c @@ -45,7 +45,7 @@ struct ip6_hdr *nfq_ip6_get_hdr(struct pkt_buff *pktb) ip6h = (struct ip6_hdr *)pktb->network_header; /* Not IPv6 packet. */ - if (ip6h->ip6_flow != 0x60) + if ((*(uint8_t *)ip6h & 0xf0) != 0x60) return NULL; return ip6h; -- cgit v1.2.3