patch-2.4.8 linux/net/ipv4/netfilter/ip_conntrack_core.c

• Lines: 9
• Date: Tue Aug 7 08:30:50 2001
• Orig file: v2.4.7/linux/net/ipv4/netfilter/ip_conntrack_core.c
• Orig date: Fri Apr 27 14:15:01 2001

diff -u --recursive --new-file v2.4.7/linux/net/ipv4/netfilter/ip_conntrack_core.c linux/net/ipv4/netfilter/ip_conntrack_core.c
@@ -356,7 +356,7 @@
 	inner = (struct iphdr *)(hdr + 1);
 	datalen = skb->len - iph->ihl*4 - sizeof(*hdr);
 
-	if (skb->len < iph->ihl * 4 + sizeof(struct icmphdr)) {
+	if (skb->len < iph->ihl * 4 + sizeof(*hdr) + sizeof(*iph)) {
 		DEBUGP("icmp_error_track: too short\n");
 		return NULL;
 	}