Commit 45241a7a authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller

[NETFILTER]: nf_nat_sip: don't drop short packets

Don't drop packets shorter than "SIP/2.0", just ignore them. Keep-alives
can validly be shorter for example.
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent aa584eda
...@@ -104,7 +104,7 @@ static unsigned int ip_nat_sip(struct sk_buff **pskb, ...@@ -104,7 +104,7 @@ static unsigned int ip_nat_sip(struct sk_buff **pskb,
dataoff = ip_hdrlen(*pskb) + sizeof(struct udphdr); dataoff = ip_hdrlen(*pskb) + sizeof(struct udphdr);
datalen = (*pskb)->len - dataoff; datalen = (*pskb)->len - dataoff;
if (datalen < sizeof("SIP/2.0") - 1) if (datalen < sizeof("SIP/2.0") - 1)
return NF_DROP; return NF_ACCEPT;
addr_map_init(ct, &map); addr_map_init(ct, &map);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment