diff options
| author | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2003-07-10 04:21:00 +0000 |
|---|---|---|
| committer | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2003-07-10 04:21:00 +0000 |
| commit | bc749f07b92c5ce3671c5d4eae22d48f4676aece (patch) | |
| tree | 6aabafa404c6c1eee063383b3d0908b1dcb1f113 | |
| parent | e3861468752f9ce5fdba5d0573279bfa40ac83fd (diff) | |
wrong comparison of IPv6 packetsize
| -rw-r--r-- | sys/net/pf_norm.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/net/pf_norm.c b/sys/net/pf_norm.c index 9c7fbd76043..f098550e909 100644 --- a/sys/net/pf_norm.c +++ b/sys/net/pf_norm.c @@ -1,4 +1,4 @@ -/* $OpenBSD: pf_norm.c,v 1.66 2003/07/09 22:11:08 itojun Exp $ */ +/* $OpenBSD: pf_norm.c,v 1.67 2003/07/10 04:20:59 itojun Exp $ */ /* * Copyright 2001 Niels Provos <provos@citi.umich.edu> @@ -1049,7 +1049,7 @@ pf_normalize_ip6(struct mbuf **m0, int dir, struct ifnet *ifp, u_short *reason) r->packets++; /* Check for illegal packets */ - if (sizeof(struct ip6_hdr) + IPV6_MAXPACKET >= m->m_pkthdr.len) + if (sizeof(struct ip6_hdr) + IPV6_MAXPACKET < m->m_pkthdr.len) goto drop; off = sizeof(struct ip6_hdr); |