[IPSEC]: Do not let packets pass when ICMP flag is off
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 13 Dec 2007 02:54:16 +0000 (18:54 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 28 Jan 2008 22:57:43 +0000 (14:57 -0800)
This fixes a logical error in ICMP policy checks which lets
packets through if the state ICMP flag is off.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>

No differences found