DNETMAP: fix write past end of buffer

diff --git a/extensions/xt_DNETMAP.c b/extensions/xt_DNETMAP.c
index 21bbab51b4af30635af52f42a4858771235a8e23..192f21ddd5516758cd99f0260e1b6f01ccaa23c1 100644 (file)
--- a/extensions/xt_DNETMAP.c
+++ b/extensions/xt_DNETMAP.c
@@ -398,7 +398,7 @@ dnetmap_tg(struct sk_buff *skb, const struct xt_action_param *par)
                /* if prefix is specified, we check if
                it matches lookedup entry */
                if (tginfo->flags & XT_DNETMAP_PREFIX)
-                       if (memcmp(mr, &e->prefix, sizeof(*mr)))
+                       if (memcmp(mr, &e->prefix->prefix, sizeof(*mr)))
                                goto no_rev_map;
                /* don't reset ttl if flag is set */
                if (jttl >= 0 && (! (e->flags & XT_DNETMAP_STATIC) ) ) {