Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
tjh.dev
kernel
os
linux
ipvs: avoid oops for passive FTP
Fix Passive FTP problem in ip_vs_ftp:
- Do not oops in nf_nat_set_seq_adjust (adjust_tcp_sequence) when
iptable_nat module is not loaded
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
authored by Julian Anastasov and committed by David S. Miller 7bcbf81a 5e4e7573
+2
-1
net/netfilter/ipvs/ip_vs_ftp.c
+2
-1
net/netfilter/ipvs/ip_vs_ftp.c
···
45
45
#include <linux/netfilter.h>
46
46
#include <net/netfilter/nf_conntrack.h>
47
47
#include <net/netfilter/nf_conntrack_expect.h>
48
+
#include <net/netfilter/nf_nat.h>
48
49
#include <net/netfilter/nf_nat_helper.h>
49
50
#include <linux/gfp.h>
50
51
#include <net/protocol.h>
···
360
359
buf_len = strlen(buf);
361
360
362
361
ct = nf_ct_get(skb, &ctinfo);
363
-
if (ct && !nf_ct_is_untracked(ct)) {
362
+
if (ct && !nf_ct_is_untracked(ct) && nfct_nat(ct)) {
364
363
/* If mangling fails this function will return 0
365
364
* which will cause the packet to be dropped.
366
365
* Mangling can only fail under memory pressure,