netfilter: nft_payload: work around vlan header stripping
authorFlorian Westphal <fw@strlen.de>
Mon, 17 Aug 2015 16:09:55 +0000 (18:09 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 19 Aug 2015 06:39:53 +0000 (08:39 +0200)
commit8cfd23e6740158817d2045915f6ea5a2daf11bce
tree31e95677b99758f856b9a78f698037ba723e28a3
parent5e8018fc61423e677398d4ad4d72df70b9788e77
netfilter: nft_payload: work around vlan header stripping

make payload expression aware of the fact that VLAN offload may have
removed a vlan header.

When we encounter tagged skb, transparently insert the tag into the
register so that vlan header matching can work without userspace being
aware of offload features.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_payload.c