diff --git a/doc/changelog.txt b/doc/changelog.txt index 860f9a6..0afcdba 100644 --- a/doc/changelog.txt +++ b/doc/changelog.txt @@ -2,6 +2,7 @@ HEAD ==== - xt_CHECKSUM: abort build when the feature is already provided by mainline +- xt_SYSRQ: fix UDPLITE header lookup in IPv6 - xt_TARPIT: fix kernel warning about RTAX_HOPLIMIT being used - xt_TEE: abort build when the feature is already provided by mainline - xt_pknock: support UDPLITE diff --git a/extensions/xt_SYSRQ.c b/extensions/xt_SYSRQ.c index 1d08fa1..e4356d5 100644 --- a/extensions/xt_SYSRQ.c +++ b/extensions/xt_SYSRQ.c @@ -244,7 +244,8 @@ sysrq_tg6(struct sk_buff **pskb, const struct xt_action_param *par) return NF_DROP; iph = ipv6_hdr(skb); - if (ipv6_find_hdr(skb, &th_off, IPPROTO_UDP, &frag_off) < 0 || + if ((ipv6_find_hdr(skb, &th_off, IPPROTO_UDP, &frag_off) < 0 && + ipv6_find_hdr(skb, &th_off, IPPROTO_UDPLITE, &frag_off) < 0) || frag_off > 0) return NF_DROP;