[IPSEC]: Do not let packets pass when ICMP flag is off
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 13 Dec 2007 02:54:16 +0000 (18:54 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:57:43 +0000 (14:57 -0800)
commitaebcf82c1fe9231be5cb4f9c1362d5db39e7d7b2
treef164bead26b172ee82d6eaa81a0148d980985bce
parentbb72845e699d3c84e5f861b51db686107a51dea5
[IPSEC]: Do not let packets pass when ICMP flag is off

This fixes a logical error in ICMP policy checks which lets
packets through if the state ICMP flag is off.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/icmp.c
net/ipv6/icmp.c