Archives/SSLproxy
2
0
Fork 0
mirror of https://github.com/sonertari/SSLproxy synced 2024-11-19 21:25:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix address family check in netfilter NAT lookup

Browse Source 
Use src_addr instead of the (yet to be set) dst_addr for determining the
address family.  Fixes issue #4.
This commit is contained in:
Daniel Roethlisberger 2012-09-27 17:30:19 +02:00
parent 6106940e0c
commit 6b4b121da2
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nat.c
View File

@ -306,12 +306,12 @@ nat_ipfilter_lookup_cb(struct sockaddr *dst_addr, socklen_t *dst_addrlen,
static int static int
nat_netfilter_lookup_cb(struct sockaddr *dst_addr, socklen_t *dst_addrlen, nat_netfilter_lookup_cb(struct sockaddr *dst_addr, socklen_t *dst_addrlen,
evutil_socket_t s, evutil_socket_t s,
UNUSED struct sockaddr *src_addr, struct sockaddr *src_addr,
UNUSED socklen_t src_addrlen) UNUSED socklen_t src_addrlen)
{ {
int rv; int rv;
if (dst_addr->sa_family != AF_INET) { if (src_addr->sa_family != AF_INET) {
log_err_printf("The netfilter NAT engine only " log_err_printf("The netfilter NAT engine only "
"supports IPv4 state lookups\n"); "supports IPv4 state lookups\n");
return -1; return -1;