patch-2.4.21 linux-2.4.21/net/ipv6/exthdrs.c

• Lines: 15
• Date: 2003-06-13 07:51:39.000000000 -0700
• Orig file: linux-2.4.20/net/ipv6/exthdrs.c
• Orig date: 2001-06-20 21:00:55.000000000 -0700

diff -urN linux-2.4.20/net/ipv6/exthdrs.c linux-2.4.21/net/ipv6/exthdrs.c
@@ -402,7 +402,13 @@
 	if (!pskb_may_pull(skb, (skb->h.raw-skb->data)+8))
 		goto fail;
 
-	len = (skb->h.raw[1]+1)<<2;
+	/*
+	 * RFC2402 2.2 Payload Length
+	 * The 8-bit field specifies the length of AH in 32-bit words 
+	 * (4-byte units), minus "2".
+	 * -- Noriaki Takamiya @USAGI Project
+	 */
+	len = (skb->h.raw[1]+2)<<2;
 
 	if (len&7)
 		goto fail;