Commit f5143e10 authored by YueHaibing's avatar YueHaibing Committed by Pablo Neira Ayuso

netfilter: xt_HMARK: Use ip_is_fragment() helper

Use ip_is_fragment() to simpify code.
Signed-off-by: default avatarYueHaibing <yuehaibing@huawei.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent ff73e747
...@@ -276,7 +276,7 @@ hmark_pkt_set_htuple_ipv4(const struct sk_buff *skb, struct hmark_tuple *t, ...@@ -276,7 +276,7 @@ hmark_pkt_set_htuple_ipv4(const struct sk_buff *skb, struct hmark_tuple *t,
return 0; return 0;
/* follow-up fragments don't contain ports, skip all fragments */ /* follow-up fragments don't contain ports, skip all fragments */
if (ip->frag_off & htons(IP_MF | IP_OFFSET)) if (ip_is_fragment(ip))
return 0; return 0;
hmark_set_tuple_ports(skb, (ip->ihl * 4) + nhoff, t, info); hmark_set_tuple_ports(skb, (ip->ihl * 4) + nhoff, t, info);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment