X-Git-Url: http://git.rohieb.name/openwrt.git/blobdiff_plain/e0c1b38c1c38b468f37ac5061837b5e359cbf371..2b27796714eb05d8ee1875b36b48b81fb0cf9e5f:/target/linux/generic-2.6/patches-2.6.21/101-netfilter_layer7_pktmatch.patch diff --git a/target/linux/generic-2.6/patches-2.6.21/101-netfilter_layer7_pktmatch.patch b/target/linux/generic-2.6/patches-2.6.21/101-netfilter_layer7_pktmatch.patch index cabffacc1..d3129eed7 100644 --- a/target/linux/generic-2.6/patches-2.6.21/101-netfilter_layer7_pktmatch.patch +++ b/target/linux/generic-2.6/patches-2.6.21/101-netfilter_layer7_pktmatch.patch @@ -1,20 +1,16 @@ -Index: linux-2.6.21.7/include/linux/netfilter/xt_layer7.h -=================================================================== ---- linux-2.6.21.7.orig/include/linux/netfilter/xt_layer7.h -+++ linux-2.6.21.7/include/linux/netfilter/xt_layer7.h +--- a/include/linux/netfilter/xt_layer7.h ++++ b/include/linux/netfilter/xt_layer7.h @@ -8,6 +8,7 @@ struct xt_layer7_info { char protocol[MAX_PROTOCOL_LEN]; + char invert:1; char pattern[MAX_PATTERN_LEN]; - u_int8_t invert; + u_int8_t pkt; }; #endif /* _XT_LAYER7_H */ -Index: linux-2.6.21.7/net/netfilter/xt_layer7.c -=================================================================== ---- linux-2.6.21.7.orig/net/netfilter/xt_layer7.c -+++ linux-2.6.21.7/net/netfilter/xt_layer7.c -@@ -297,34 +297,36 @@ static int match_no_append(struct nf_con +--- a/net/netfilter/xt_layer7.c ++++ b/net/netfilter/xt_layer7.c +@@ -296,34 +296,36 @@ static int match_no_append(struct nf_con } /* add the new app data to the conntrack. Return number of bytes added. */ @@ -65,8 +61,8 @@ Index: linux-2.6.21.7/net/netfilter/xt_layer7.c return length; } -@@ -411,7 +413,7 @@ match(const struct sk_buff *skbin, - const struct xt_layer7_info * info = matchinfo; +@@ -410,7 +412,7 @@ match(const struct sk_buff *skbin, + struct xt_layer7_info * info = (struct xt_layer7_info *)matchinfo; enum ip_conntrack_info master_ctinfo, ctinfo; struct nf_conn *master_conntrack, *conntrack; - unsigned char * app_data; @@ -74,7 +70,7 @@ Index: linux-2.6.21.7/net/netfilter/xt_layer7.c unsigned int pattern_result, appdatalen; regexp * comppattern; -@@ -439,8 +441,8 @@ match(const struct sk_buff *skbin, +@@ -438,8 +440,8 @@ match(const struct sk_buff *skbin, master_conntrack = master_ct(master_conntrack); /* if we've classified it or seen too many packets */ @@ -85,7 +81,7 @@ Index: linux-2.6.21.7/net/netfilter/xt_layer7.c pattern_result = match_no_append(conntrack, master_conntrack, ctinfo, master_ctinfo, info); -@@ -473,6 +475,25 @@ match(const struct sk_buff *skbin, +@@ -472,6 +474,25 @@ match(const struct sk_buff *skbin, /* the return value gets checked later, when we're ready to use it */ comppattern = compile_and_cache(info->pattern, info->protocol);