linux 2.6.16.38 w/ vs2.0.3-rc1

[linux-2.6.git] / net / ipv4 / netfilter / ipt_addrtype.c

diff --git a/net/ipv4/netfilter/ipt_addrtype.c b/net/ipv4/netfilter/ipt_addrtype.c
index 893dae2..d6b83a9 100644 (file)
--- a/net/ipv4/netfilter/ipt_addrtype.c
+++ b/net/ipv4/netfilter/ipt_addrtype.c
@@ -27,9 +27,8 @@ static inline int match_type(u_int32_t addr, u_int16_t mask)
        return !!(mask & (1 << inet_addr_type(addr)));
 }
 
-static int match(const struct sk_buff *skb,
-                const struct net_device *in, const struct net_device *out,
-                const struct xt_match *match, const void *matchinfo,
+static int match(const struct sk_buff *skb, const struct net_device *in,
+                const struct net_device *out, const void *matchinfo,
                 int offset, unsigned int protoff, int *hotdrop)
 {
        const struct ipt_addrtype_info *info = matchinfo;
@@ -44,22 +43,35 @@ static int match(const struct sk_buff *skb,
        return ret;
 }
 
+static int checkentry(const char *tablename, const void *ip,
+                     void *matchinfo, unsigned int matchsize,
+                     unsigned int hook_mask)
+{
+       if (matchsize != IPT_ALIGN(sizeof(struct ipt_addrtype_info))) {
+               printk(KERN_ERR "ipt_addrtype: invalid size (%u != %Zu)\n",
+                      matchsize, IPT_ALIGN(sizeof(struct ipt_addrtype_info)));
+               return 0;
+       }
+
+       return 1;
+}
+
 static struct ipt_match addrtype_match = {
        .name           = "addrtype",
        .match          = match,
-       .matchsize      = sizeof(struct ipt_addrtype_info),
+       .checkentry     = checkentry,
        .me             = THIS_MODULE
 };
 
-static int __init ipt_addrtype_init(void)
+static int __init init(void)
 {
        return ipt_register_match(&addrtype_match);
 }
 
-static void __exit ipt_addrtype_fini(void)
+static void __exit fini(void)
 {
        ipt_unregister_match(&addrtype_match);
 }
 
-module_init(ipt_addrtype_init);
-module_exit(ipt_addrtype_fini);
+module_init(init);
+module_exit(fini);