From: fendo Date: Sun, 17 Mar 2013 19:14:05 +0000 (+0100) Subject: Fix possible IPv6 spoofing X-Git-Tag: 2.2.1-2fdn3.7~2 X-Git-Url: http://git.sameswireless.fr/l2tpns.git/commitdiff_plain/4ac1a263960dd8d535dcc15f30856d07c01ac2e4?hp=500bd3b1aef9b83469f166f95792decfc680fa11 Fix possible IPv6 spoofing --- diff --git a/ppp.c b/ppp.c index 893ceb9..bd70e4d 100644 --- a/ppp.c +++ b/ppp.c @@ -2244,7 +2244,7 @@ void processipv6in(sessionidt s, tunnelidt t, uint8_t *p, uint16_t l) return; // no spoof - if (ipv4 != session[s].ip && memcmp(&config->ipv6_prefix, &ip, 8) && sessionbyipv6(ip) != s) + if ((ipv4 != session[s].ip || memcmp(&config->ipv6_prefix, &ip, 8)) && sessionbyipv6(ip) != s) { char str[INET6_ADDRSTRLEN]; LOG(5, s, t, "Dropping packet with spoofed IP %s\n",