Commit a2d56aca authored by Patrick McHardy's avatar Patrick McHardy

[NETFILTER]: ip6t_esp.c whitespace cleanup

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent 1b9a1003
...@@ -32,8 +32,8 @@ static inline int ...@@ -32,8 +32,8 @@ static inline int
spi_match(u_int32_t min, u_int32_t max, u_int32_t spi, int invert) spi_match(u_int32_t min, u_int32_t max, u_int32_t spi, int invert)
{ {
int r=0; int r=0;
DEBUGP("esp spi_match:%c 0x%x <= 0x%x <= 0x%x",invert? '!':' ', DEBUGP("esp spi_match:%c 0x%x <= 0x%x <= 0x%x",invert? '!':' ',
min,spi,max); min,spi,max);
r=(spi >= min && spi <= max) ^ invert; r=(spi >= min && spi <= max) ^ invert;
DEBUGP(" result %s\n",r? "PASS\n" : "FAILED\n"); DEBUGP(" result %s\n",r? "PASS\n" : "FAILED\n");
return r; return r;
...@@ -66,21 +66,20 @@ match(const struct sk_buff *skb, ...@@ -66,21 +66,20 @@ match(const struct sk_buff *skb,
len = skb->len - ptr; len = skb->len - ptr;
temp = 0; temp = 0;
while (ip6t_ext_hdr(nexthdr)) { while (ip6t_ext_hdr(nexthdr)) {
struct ipv6_opt_hdr _hdr, *hp; struct ipv6_opt_hdr _hdr, *hp;
int hdrlen; int hdrlen;
DEBUGP("ipv6_esp header iteration \n"); DEBUGP("ipv6_esp header iteration \n");
/* Is there enough space for the next ext header? */ /* Is there enough space for the next ext header? */
if (len < (int)sizeof(struct ipv6_opt_hdr)) if (len < sizeof(struct ipv6_opt_hdr))
return 0; return 0;
/* No more exthdr -> evaluate */ /* No more exthdr -> evaluate */
if (nexthdr == NEXTHDR_NONE) { if (nexthdr == NEXTHDR_NONE)
break; break;
}
/* ESP -> evaluate */ /* ESP -> evaluate */
if (nexthdr == NEXTHDR_ESP) { if (nexthdr == NEXTHDR_ESP) {
temp |= MASK_ESP; temp |= MASK_ESP;
break; break;
} }
...@@ -89,43 +88,43 @@ match(const struct sk_buff *skb, ...@@ -89,43 +88,43 @@ match(const struct sk_buff *skb,
BUG_ON(hp == NULL); BUG_ON(hp == NULL);
/* Calculate the header length */ /* Calculate the header length */
if (nexthdr == NEXTHDR_FRAGMENT) { if (nexthdr == NEXTHDR_FRAGMENT)
hdrlen = 8; hdrlen = 8;
} else if (nexthdr == NEXTHDR_AUTH) else if (nexthdr == NEXTHDR_AUTH)
hdrlen = (hp->hdrlen+2)<<2; hdrlen = (hp->hdrlen+2)<<2;
else else
hdrlen = ipv6_optlen(hp); hdrlen = ipv6_optlen(hp);
/* set the flag */ /* set the flag */
switch (nexthdr){ switch (nexthdr) {
case NEXTHDR_HOP: case NEXTHDR_HOP:
case NEXTHDR_ROUTING: case NEXTHDR_ROUTING:
case NEXTHDR_FRAGMENT: case NEXTHDR_FRAGMENT:
case NEXTHDR_AUTH: case NEXTHDR_AUTH:
case NEXTHDR_DEST: case NEXTHDR_DEST:
break; break;
default: default:
DEBUGP("ipv6_esp match: unknown nextheader %u\n",nexthdr); DEBUGP("ipv6_esp match: unknown nextheader %u\n",nexthdr);
return 0; return 0;
break;
} }
nexthdr = hp->nexthdr; nexthdr = hp->nexthdr;
len -= hdrlen; len -= hdrlen;
ptr += hdrlen; ptr += hdrlen;
if ( ptr > skb->len ) { if (ptr > skb->len) {
DEBUGP("ipv6_esp: new pointer too large! \n"); DEBUGP("ipv6_esp: new pointer too large! \n");
break; break;
} }
} }
/* ESP header not found */ /* ESP header not found */
if ( temp != MASK_ESP ) return 0; if (temp != MASK_ESP)
return 0;
if (len < (int)sizeof(struct ip_esp_hdr)){ if (len < sizeof(struct ip_esp_hdr)) {
*hotdrop = 1; *hotdrop = 1;
return 0; return 0;
} }
eh = skb_header_pointer(skb, ptr, sizeof(_esp), &_esp); eh = skb_header_pointer(skb, ptr, sizeof(_esp), &_esp);
BUG_ON(eh == NULL); BUG_ON(eh == NULL);
...@@ -158,7 +157,6 @@ checkentry(const char *tablename, ...@@ -158,7 +157,6 @@ checkentry(const char *tablename,
espinfo->invflags); espinfo->invflags);
return 0; return 0;
} }
return 1; return 1;
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment