tproxy: fixe a possible read from an invalid location in the socket match
authorBalazs Scheidler <bazsi@balabit.hu>
Mon, 8 Dec 2008 07:53:46 +0000 (23:53 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 8 Dec 2008 07:53:46 +0000 (23:53 -0800)
commitc49b9f295e513753e6d9bb4444ba502f1aa59b29
treece46987a31304cf239bd8ee46afbc059cefab5dc
parent0a0755c9fe47dc9f8271935909c66096e43efbfe
tproxy: fixe a possible read from an invalid location in the socket match

TIME_WAIT sockets need to be handled specially, and the socket match
casted inet_timewait_sock instances to inet_sock, which are not
compatible.

Handle this special case by checking sk->sk_state.

Signed-off-by: Balazs Scheidler <bazsi@balabit.hu>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/netfilter/xt_socket.c