[packages/kernel.git] / 2.6.7-remote-iptables-DoS.patch

--- linux-2.6.7/net/ipv4/netfilter/ip_tables.c.orig	2004-06-30 20:54:36.000000000 +0200
+++ linux-2.6.7/net/ipv4/netfilter/ip_tables.c	2004-07-01 08:50:43.372358512 +0200
@@ -1472,7 +1472,7 @@
 		int *hotdrop)
 {
 	/* tcp.doff is only 4 bits, ie. max 15 * 4 bytes */
-	char opt[60 - sizeof(struct tcphdr)];
+	u_int8_t opt[60 - sizeof(struct tcphdr)];
 	unsigned int i;
 
 	duprintf("tcp_match: finding option\n");
Commit	Line	Data
6d056178 PS	1	--- linux-2.6.7/net/ipv4/netfilter/ip_tables.c.orig 2004-06-30 20:54:36.000000000 +0200
	2	+++ linux-2.6.7/net/ipv4/netfilter/ip_tables.c 2004-07-01 08:50:43.372358512 +0200
	3	@@ -1472,7 +1472,7 @@
	4	int *hotdrop)
	5	{
	6	/* tcp.doff is only 4 bits, ie. max 15 * 4 bytes */
	7	- char opt[60 - sizeof(struct tcphdr)];
	8	+ u_int8_t opt[60 - sizeof(struct tcphdr)];
	9	unsigned int i;
	10
	11	duprintf("tcp_match: finding option\n");