netfilter: nf_tables: use skb->protocol instead of assuming ethernet …

…header Otherwise we may end up with incorrect network and transport header for other protocols. Signed-off-by: Pablo Neira Ayuso <[email protected]>
zubinmehta · Dec 18, 2015 · aa47e42 · aa47e42
1 parent 73796d8
commit aa47e42
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/net/netfilter/nf_tables_netdev.c b/net/netfilter/nf_tables_netdev.c
@@ -94,7 +94,7 @@ nft_do_chain_netdev(void *priv, struct sk_buff *skb,
 {
 	struct nft_pktinfo pkt;
 
-	switch (eth_hdr(skb)->h_proto) {
+	switch (skb->protocol) {
 	case htons(ETH_P_IP):
 		nft_netdev_set_pktinfo_ipv4(&pkt, skb, state);
 		break;