Skip to content

Commit 3927ce8

Browse files
committed
netfilter: nft_payload: access ipip payload for inner offset
ipip is an special case, transport and inner header offset are set to the same offset to use the upcoming inner expression for matching on inner tunnel headers. Signed-off-by: Pablo Neira Ayuso <[email protected]>
1 parent c247897 commit 3927ce8

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

net/netfilter/nft_payload.c

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -132,6 +132,9 @@ static int __nft_payload_inner_offset(struct nft_pktinfo *pkt)
132132
pkt->inneroff = thoff + offset;
133133
}
134134
break;
135+
case IPPROTO_IPIP:
136+
pkt->inneroff = thoff;
137+
break;
135138
default:
136139
return -1;
137140
}

0 commit comments

Comments
 (0)