From: Phil Sutter <phil@nwl.cc>
Date: Thu, 17 Nov 2022 16:38:52 +0000 (+0100)
Subject: extensions: frag: Add comment to clarify xlate callback
X-Git-Tag: v1.8.9~49
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8a714a4f4173d6e3d32ff414fac837bc0fd6b99c;p=thirdparty%2Fiptables.git

extensions: frag: Add comment to clarify xlate callback

Matching on fragmentation header length is ineffective in kernel, xlate
callback correctly ignores it. Add a comment as a hint for reviewers.

Signed-off-by: Phil Sutter <phil@nwl.cc>
---

diff --git a/extensions/libip6t_frag.c b/extensions/libip6t_frag.c
index 3842496e..72a43153 100644
--- a/extensions/libip6t_frag.c
+++ b/extensions/libip6t_frag.c
@@ -193,6 +193,8 @@ static int frag_xlate(struct xt_xlate *xl,
 		space = " ";
 	}
 
+	/* ignore ineffective IP6T_FRAG_LEN bit */
+
 	if (fraginfo->flags & IP6T_FRAG_RES) {
 		xt_xlate_add(xl, "%sfrag reserved 1", space);
 		space = " ";