netfilter: nft_inner: fix return value check in nft_inner_parse_l2l3()

In nft_inner_parse_l2l3(), the return value of skb_header_pointer() is
'veth' instead of 'eth' when case 'htons(ETH_P_8021Q)' and fix it.

Fixes: 3a07327d10a0 ("netfilter: nft_inner: support for inner tunnel header matching")
Signed-off-by: Peng Wu <wupeng58@huawei.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/net/netfilter/nft_inner.c b/net/netfilter/nft_inner.c
index eae7caeff316a7e90e5f1038812990c7f41fa8a9..809f0d0787ec2f7a82bf285bd81a7d0fff364b79 100644 (file)
--- a/net/netfilter/nft_inner.c
+++ b/net/netfilter/nft_inner.c
@@ -72,7 +72,7 @@ static int nft_inner_parse_l2l3(const struct nft_inner *priv,
                        break;
                case htons(ETH_P_8021Q):
                        veth = skb_header_pointer(pkt->skb, off, sizeof(_veth), &_veth);
-                       if (!eth)
+                       if (!veth)
                                return -1;
 
                        outer_llproto = veth->h_vlan_encapsulated_proto;