extensions: frag: Add comment to clarify xlate callback

Matching on fragmentation header length is ineffective in kernel, xlate
callback correctly ignores it. Add a comment as a hint for reviewers.

Signed-off-by: Phil Sutter <phil@nwl.cc>

diff --git a/extensions/libip6t_frag.c b/extensions/libip6t_frag.c
index 3842496e56a554715523e32fc0327502c6a3b52c..72a43153c53dcc5c24474c615cde10d2d232a363 100644 (file)
--- a/extensions/libip6t_frag.c
+++ b/extensions/libip6t_frag.c
@@ -193,6 +193,8 @@ static int frag_xlate(struct xt_xlate *xl,
                space = " ";
        }
 
+       /* ignore ineffective IP6T_FRAG_LEN bit */
+
        if (fraginfo->flags & IP6T_FRAG_RES) {
                xt_xlate_add(xl, "%sfrag reserved 1", space);
                space = " ";